Flagged newborn domains, Thursday, November 12, 2026

3,810 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumcorecore-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumcostcotravelbag.comscore 30echoes costco
brand in the name “costco”
Mediumcrazyboutdisney.comscore 30echoes disney
brand in the name “disney”
Mediumcrisp-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumcrossin-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumcryptonet.helpscore 30· active website
page asks for credentials “log in to your account”
Mediumdahalizgoogle.comscore 30echoes google
brand in the name “google”
Mediumdefendertelegram.onlinescore 30echoes telegram· active website
brand in the name “telegram”
Mediumdeutschebanking.comscore 30echoes deutschebank
brand in the name “deutschebank”
Mediumdevice-google.comscore 30echoes google
brand in the name “google”
Mediumdewaotp.topscore 30· active website
TLD with a high abuse rate “top”page impersonates a brand “Binance”
Mediumdietaryoutlook.comscore 30echoes outlook
brand in the name “outlook”
Mediumdisneylanguage.comscore 30echoes disney
brand in the name “disney”
Mediumdoorin-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumdoorway-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumdronedriver.xyzscore 30echoes onedrive· parked, for sale
brand in the name “onedrive”TLD with a high abuse rate “xyz”brand name redirects elsewhere “atom.com”
Mediumdsuhus.sbsscore 30· active website
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”page pushes urgent payment “guaranteed returns”
Mediumdtqamzgmail.comscore 30echoes gmail
brand in the name “gmail”
Mediumec-roblox.comscore 30echoes roblox
brand in the name “roblox”
Mediumeleganthomeusaa.comscore 30echoes usaa
brand in the name “usaa”
Mediumelonvidia.comscore 30echoes nvidia
brand in the name “nvidia”
Mediumencontrargrupostelegram.comscore 30echoes telegram
brand in the name “telegram”
Mediumentrygo-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumetsytrades.comscore 30echoes etsy
brand in the name “etsy”
Mediumf8g.livescore 30· active website
page asks for credentials “Log in to your account”
Mediumfacebookvsyoutube.comscore 30echoes facebook
brand in the name “facebook”
Mediumfastgo-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumfastnode.lolscore 30· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”
Mediumfatcatyun.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”
Mediumfedexlwk.comscore 30echoes fedex
brand in the name “fedex”
Mediumfedexnet.infoscore 30echoes fedex· robots.txt denied
brand in the name “fedex”
Mediumfeedheb.comscore 30· active website
page asks for credentials “Verify your account”
Mediumfidelity-sup.comscore 30echoes fidelity
brand in the name “fidelity”
Mediumfidelityautodetailing.comscore 30echoes fidelity
brand in the name “fidelity”
Mediumfidelitysarl.comscore 30echoes fidelity
brand in the name “fidelity”
Mediumfinweb-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumflashctx.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”
Mediumforfaitmobile.infoscore 30echoes tmobile· robots.txt denied
brand in the name “tmobile”
Mediumfreshgo-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumgatein-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumgetbusinesslistedonchatgpt.comscore 30echoes chatgpt
brand in the name “chatgpt”
Mediumgetmycheck.buzzscore 30· active website
TLD with a high abuse rate “buzz”free DNS provider “dnsowl.com”login form “has_form+login words”
Mediumgetwisebay.comscore 30echoes ebay
brand in the name “ebay”
Mediumglamazon.websitescore 30echoes amazon· not probed yet
brand in the name “amazon”
Mediumgmaildoanhnghiep.comscore 30echoes gmail
brand in the name “gmail”
Mediumgonow-whatsapp.comscore 30echoes whatsapp
brand in the name “whatsapp”
Mediumgoogle-flights.clubscore 30echoes google· not probed yet
brand in the name “google”
Mediumgooglearbiz.comscore 30echoes google
brand in the name “google”
Mediumgooglebookflex.comscore 30echoes google
brand in the name “google”
Mediumgooglemeetmeetnow.comscore 30echoes google
brand in the name “google”

Same data as JSON: /api/zone/risk?day=2026-11-12&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.