Flagged newborn domains, Saturday, August 29, 2026

2,225 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumthespaceconnect.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumthestarlink.shopscore 30echoes starlink· not probed yet
brand in the name “starlink”
Mediumtoolsapps.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumtrymysoothenaturals.sitescore 30· active website
free DNS provider “dnsowl.com”page impersonates a brand “Paypal”
Mediumtryvapofil.websitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumtunerevm.clickscore 30· active website
TLD with a high abuse rate “click”page impersonates a brand “MetaMask”
Mediumtvshihab.livescore 30· active website
page asks for credentials “Login to your account”
Mediumusreviewhub.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumuswellnessreview.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumvaelessentials.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumvalenzastyle.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumvapesupplier.bondscore 30· active website
TLD with a high abuse rate “bond”page impersonates a brand “HMRC”
Mediumvittaliva.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumwelloralabs.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumwogcreatives.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumworkwithai.proscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumxindongli159.topscore 30· active website
TLD with a high abuse rate “top”page impersonates a brand “Netflix”
Mediumyouchattv.topscore 30· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”login form “has_form+login words”
Mediumyourwellnessreview.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumzelinart.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumzellersupply.shopscore 30echoes zelle· empty page
brand in the name “zelle”
Mediumrentnintendoswitch.shopscore 29echoes nintendo· active website
brand in the name “nintendo”brand name and brand-styled page “nintendo”
Medium1235queenbet.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Medium1241queenbet.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Medium131ultrabet.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Medium134ultrabet.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Medium1480romabet.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Medium1b2hv2.icuscore 28· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
Medium1jh2b2.skinscore 28· blocked the probe
TLD with a high abuse rate “skin”brand in page title, not in the name “cloudflare”
Medium1xbet-cx1y.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Medium1xbet-osbd.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Medium1xbet-rmxt.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Medium1xbet-ts7i.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Medium2026-holigan-aktif.icuscore 28· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
Medium2343marsbahis.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Medium259supertotobet.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Medium2jgy33.icuscore 28· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
Medium2yw6t3y.skinscore 28· blocked the probe
TLD with a high abuse rate “skin”brand in page title, not in the name “cloudflare”
Medium360noscope.funscore 28· redirects elsewhere
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Medium3gwy3t.skinscore 28· blocked the probe
TLD with a high abuse rate “skin”brand in page title, not in the name “cloudflare”
Medium3jhwey3.icuscore 28· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
Medium427kolaybet.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Medium43fgy512.monsterscore 28· blocked the probe
TLD with a high abuse rate “monster”brand in page title, not in the name “cloudflare”
Medium4iju4e.icuscore 28· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
Medium4seo.sbsscore 28· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Medium4uegy3y.skinscore 28· blocked the probe
TLD with a high abuse rate “skin”brand in page title, not in the name “cloudflare”
Medium595926.xyzscore 28· blocked the probe
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Medium5eijue.skinscore 28· blocked the probe
TLD with a high abuse rate “skin”brand in page title, not in the name “cloudflare”
Medium5orih4u.icuscore 28· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
Medium6euy3ye.skinscore 28· blocked the probe
TLD with a high abuse rate “skin”brand in page title, not in the name “cloudflare”

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.