Flagged newborn domains, Friday, November 13, 2026

2,539 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

lure words (login, verify, secure…) “service,services”nameserver domain born the same day “getlogisticshelp.info”
Mediumexplorelogisticsservices.infoscore 37· no DNS
lure words (login, verify, secure…) “service,services”nameserver domain born the same day “getlogisticshelp.info”
Mediumafriscope-mobile-health.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Wix.com Ltd.”
Mediumai-ledge.proscore 36echoes ledger· registrar placeholder
one-letter brand typo “ledge≈ledger”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumaion-cloud.netscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumalex-cloud.spacescore 36echoes icloud· empty page
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumaureos-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “IONOS SE”
Mediumava-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
Mediumbot-ledge.onlinescore 36echoes ledger· registrar placeholder
one-letter brand typo “ledge≈ledger”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumcashappspinslots.shopscore 36echoes cashapp· no DNS
brand in the name “cashapp”brand name behind Cloudflare “cloudflare.com”
Mediumchase.ovhscore 36echoes chase· active website
ambiguous brand word “chase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OVH”form on a brand-styled page “has_form”
Mediumcleansia.topscore 36· other
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumcloud-japan.asiascore 36echoes icloud· no web server
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Global Domain Group LLC”
Mediumduketechmultinationalservices.onlinescore 36· active website
lure words (login, verify, secure…) “service,services”very long name “29”brand in page title, not in the name “starlink”
Mediumechat.infoscore 36echoes wechat· parked, for sale
one-letter brand typo “echat≈wechat”brand name at a retail registrar “DropCatch.com 391 LLC”
Mediumemails-shoplfy.comscore 36echoes shopify
one-letter brand typo “shoplfy≈shopify”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumepicgame.techscore 36echoes epicgames· no DNS
one-letter brand typo “epicgame≈epicgames”brand name at a retail registrar “InterNetX GmbH”
Mediumfbbhsharework.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumfbydlsunlight.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumflora-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “Gransy, s.r.o.”
Mediumgorilla-cloud.onlinescore 36echoes icloud· registrar placeholder
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumgrablynx.xyzscore 36· server error
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediumlinkedln.onlinescore 36echoes linkedin· excluded
one-letter brand typo “linkedln≈linkedin”brand name at a retail registrar “GoDaddy.com, LLC”
Mediummajori-finance.comscore 36echoes binance
one-letter brand typo “finance≈binance”brand name at a retail registrar “IONOS SE”
Mediummedcare-design.comscore 36echoes medicare
one-letter brand typo “medcare≈medicare”brand name at a retail registrar “XServer, Inc.”
Mediummengotomars.workscore 36· other
TLD with a high abuse rate “work”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
Mediummobile-ayxhth.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediummobile-leyuhth.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediummobile-milansport.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “CV. Rumahweb Indonesia”
Mediummobile-porn.proscore 36echoes tmobile· no web server
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “CommuniGal Communication Ltd.”
Mediummobile-properties.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumneuro-ledge.onlinescore 36echoes ledger· registrar placeholder
one-letter brand typo “ledge≈ledger”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumnvodia.comscore 36echoes nvidia
one-letter brand typo “nvodia≈nvidia”brand name at a retail registrar “DropCatch.com 1680 LLC”
Mediumpaypay.bizscore 36echoes paypal· active website
one-letter brand typo “paypay≈paypal”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumpcloud.businessscore 36echoes icloud· no DNS
one-letter brand typo “pcloud≈icloud”brand name at a retail registrar “Tucows Domains Inc.”
Mediumpcloud.contactscore 36echoes icloud· no DNS
one-letter brand typo “pcloud≈icloud”brand name at a retail registrar “Tucows Domains Inc.”
Mediumproject-finance.orgscore 36echoes binance· robots.txt denied
one-letter brand typo “finance≈binance”brand name at a retail registrar “Tucows Domains Inc.”
Mediumpublic-cloud.topscore 36echoes icloud· blocked the probe
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”
Mediumqashapp.netscore 36echoes cashapp
one-letter brand typo “qashapp≈cashapp”brand name at a retail registrar “Tucows Domains Inc.”
Mediumracebook.spacescore 36echoes facebook· no web server
one-letter brand typo “racebook≈facebook”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumrubyfortune-casino-mobile.comscore 36echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Key-Systems GmbH”
Mediumseeu-cloud.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “DNSPod, Inc.”
Mediumsendai-cooking.comscore 36echoes booking
one-letter brand typo “cooking≈booking”brand name at a retail registrar “XServer, Inc.”
Mediumspy-cloud.cloudscore 36echoes icloud· no web server
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “IONOS SE”
Mediumtheptiktok88.comscore 36echoes tiktok
brand in the name “tiktok”brand plus digits “theptiktok88”brand name on a rarely-seen nameserver “in.th”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumtiktokbook.shopscore 36echoes tiktok· active website
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”
Mediumvisio-cloud-ocean.comscore 36echoes icloud
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Amazon Registrar, Inc.”
Mediumvoices-cloud.proscore 36echoes icloud· no web server
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
Mediumvpdrpb.topscore 36· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumwhatszapp.onescore 36echoes whatsapp· not probed yet
one-letter brand typo “whatszapp≈whatsapp”brand name at a retail registrar “GoDaddy.com, LLC”

Same data as JSON: /api/zone/risk?day=2026-11-13&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.