Flagged newborn domains, Friday, November 6, 2026

2,621 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumfideiity.ltdscore 36echoes fidelity· boilerplate page
one-letter brand typo “fideiity≈fidelity”brand name at a retail registrar “Hefei Juming Network Technology Co., Ltd”
Mediumfinance-for-all.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Wix.com Ltd.”
Mediumfinance-protocol.worldscore 36echoes binance· not probed yet
one-letter brand typo “finance≈binance”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumflaplay10sb.topscore 36· blocked the probe
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumgroguit.topscore 36· blocked the probe
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumhello-cloud-test.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
Mediumjefferson-haven-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Gransy, s.r.o.”
Mediumkalfire-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Register SPA”
Mediumkevin-cloud.onlinescore 36echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Chengdu West Dimension Digital Technolog”
Mediumledge.proscore 36echoes ledger· no DNS
one-letter brand typo “ledge≈ledger”brand name at a retail registrar “Xiamen ChinaSource Internet Service Co.,”
Mediumlifeafternvidia.comscore 36echoes nvidia
brand in the name “nvidia”brand name behind Cloudflare “cloudflare.com”
Mediumlumous.funscore 36· active website
TLD with a high abuse rate “fun”free DNS provider “dnsowl.com”brand in page title, not in the name “robinhood”
Mediumlyj-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
Mediummail-cloud.proscore 36echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediummobile-living-solutions.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Ledl.net GmbH & Co KG”
Mediumnorth-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Gransy, s.r.o.”
Mediumpacebook.orgscore 36echoes facebook· empty page
one-letter brand typo “pacebook≈facebook”brand name at a retail registrar “Name.com, Inc.”
Mediumpanen123cass.topscore 36· blocked the probe
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumpawpal.inkscore 36echoes paypal· active website
one-letter brand typo “pawpal≈paypal”brand name at a retail registrar “DNSPod, Inc.”
Mediumpaypal-giving-fund.netscore 36echoes paypal
brand in the name “paypal”brand name on a rarely-seen nameserver “markmonitor.com”
Mediumpointest-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediumqcloud-si.comscore 36echoes icloud
one-letter brand typo “qcloud≈icloud”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumrobo-x.lifescore 36echoes roblox· empty page
one-letter brand typo “robox≈roblox”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumschopuinw.topscore 36· other
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumsetouchi-starline.comscore 36echoes starling· boilerplate page
one-letter brand typo “starline≈starling”brand name at a retail registrar “XServer, Inc.”
Mediumsocietegeneraie.comscore 36echoes societegenerale
one-letter brand typo “societegeneraie≈societegenerale”brand name at a retail registrar “Name.com, Inc.”
Mediumstarting-blocks.orgscore 36echoes starling· robots.txt denied
one-letter brand typo “starting≈starling”brand name at a retail registrar “Gandi SAS”
Mediumstr-mobile.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumswitch-finance.netscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “OVH sas”
Mediumtdrfinancial.comscore 36· active website
page impersonates a brand “IRS”page pushes urgent payment “limited time offer”
Mediumteams-microsofft.comscore 36echoes microsoft
one-letter brand typo “microsofft≈microsoft”brand name at a retail registrar “P.A. Viet Nam Company Limited”
Mediumthe-walt-disney-company.comscore 36echoes disney
brand in the name “disney”many hyphens “3”
Mediumtkouwork.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumtown-slacker.topscore 36echoes slack· empty page
brand in the name “slack”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “烟台帝思普网络科技有限公司”
Mediumunicredlt.comscore 36echoes unicredit
one-letter brand typo “unicredlt≈unicredit”brand name at a retail registrar “Domain Science Kutatasi Szolgaltato Korl”
Mediumuspssersecf.onlinescore 36echoes usps· no DNS
brand in the name “usps”brand name behind Cloudflare “cloudflare.com”
Mediumwellsfawgo.comscore 36echoes wellsfargo
one-letter brand typo “wellsfawgo≈wellsfargo”brand name at a retail registrar “Media Elite Holdings Limited, S.A.”
Mediumxcloud-iptv.comscore 36echoes icloud
one-letter brand typo “xcloud≈icloud”brand name at a retail registrar “Realtime Register B.V.”
many hyphens “6”very long name “51”random-looking name “H=4.30”brand in page title, not in the name “cloudflare”
Mediumxn--1ck8ba3fbbr0d5d9707bh3d625m.xyzscore 35· not probed yet
punycode name “フラーレン化粧品フラセラ scripts=CJK/KATAKANA/KATAKA”very long name “31”random-looking name “H=4.14”TLD with a high abuse rate “xyz”
punycode name “子供の身長背を伸ばす無添加サプリ scripts=CJK/HIRAGANA/KA”very long name “49”random-looking name “H=4.54”TLD with a high abuse rate “xyz”
Mediumxn--88jybg9ko84n5qas96dl7s9toyz3f4vp.xyzscore 35· not probed yet
punycode name “子供の身長を伸ばす方法 scripts=CJK/HIRAGANA”very long name “36”random-looking name “H=4.51”TLD with a high abuse rate “xyz”
Mediumxn--98jxdve8bcn6e8ck0v5dxe4ec4415kittl.xyzscore 35· not probed yet
punycode name “デリケートゾーン黒ずみケア口コミ scripts=CJK/HIRAGANA/KA”very long name “38”random-looking name “H=4.09”TLD with a high abuse rate “xyz”
Mediumxn--bcktbl7d2a2cxdg4epw2hd6il8704l.xyzscore 35· not probed yet
punycode name “ミネラルファンデーション・口コミ scripts=CJK/KATAKANA/KA”very long name “34”random-looking name “H=4.24”TLD with a high abuse rate “xyz”
Mediumxn--f9j3a2c4bxnmmi99scj0a9d0h.xyzscore 35· not probed yet
punycode name “顔のシワたるみ改善 scripts=CJK/HIRAGANA/KATAKANA”very long name “29”random-looking name “H=3.94”TLD with a high abuse rate “xyz”
Mediumxn--f9jr9dng6hpjya18avb7l5dq393fhkxb.xyzscore 35· not probed yet
punycode name “ポケモンゴー攻略まとめたもん scripts=CJK/HIRAGANA/KATA”very long name “36”random-looking name “H=4.42”TLD with a high abuse rate “xyz”
Mediumxn--gdkza9cxb6016bweyai55clea.topscore 35· no web server
punycode name “飲食ブランド戦略 scripts=CJK/KATAKANA”very long name “29”random-looking name “H=4.13”TLD with a high abuse rate “top”
Mediumxn--n9jz68k4igulc13c1wcr15d5io.xyzscore 35· not probed yet
punycode name “船橋市で浮気調査 scripts=CJK/HIRAGANA”very long name “30”random-looking name “H=4.25”TLD with a high abuse rate “xyz”
Mediumxn--pckwbr3771ai6c13ttjqwxldg1fb4fhql.xyzscore 35· not probed yet
punycode name “人間ドック料金内容比較 scripts=CJK/KATAKANA”very long name “37”random-looking name “H=4.42”TLD with a high abuse rate “xyz”
Mediumxn--tck4dk1b8820abzgtu4b52cdpeg67c1uj.xyzscore 35· not probed yet
punycode name “脱毛ラボ横浜予約口コミ scripts=CJK/KATAKANA”very long name “37”random-looking name “H=4.34”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-11-06&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.