Mediumscore 38 · flagged Monday, October 26, 2026

42vp.blog

Appeared in the .blog zone on Monday, October 26, 2026; by the end of that day the census found active website about adult. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in page title, not in the name
matched: telegram
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Spaceship, Inc.
Nameserver provider
Nameservers
coen.ns.cloudflare.com, raina.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Top OnlyFans Telegram Channels | Free Content Previews | 42vp.blog
Has a form
yes
Brand echoed
—

Model opinions

Second opinionlooks like abuseconfidence 68%· claude-opus-5-5

The page is a 'TrendyGroup' group-link directory template under a throwaway name. It is titled 'Top OnlyFans Telegram Channels' and lists entries such as 'alylynn onlyfans leaks' and 'ms puiyi leaks', so it fronts pirated adult content. It does not impersonate Telegram or OnlyFans: it uses its own branding and its only form is a GET search posting to itself, with no credential capture.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

The site operates as an unlicensed aggregator and directory for leaked adult content (OnlyFans, non-consensual intimate imagery) across messaging platforms, facilitating copyright infringement and potential non-consensual content distribution. While it has a login form, it is not impersonating a specific brand—it is running its own 'TrendyGroup' platform for content piracy and abuse aggregation.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

Same data as JSON: /api/zone/domain/42vp.blog. This page is not indexed by search engines and does not link to the site it describes.