Flagged newborn domains, Thursday, September 3, 2026

2,659 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumwavorix-luckystreak.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumweb-jmpedtropic.topscore 28· active website
TLD with a high abuse rate “top”brand in page title, not in the name “namecheap”
Mediumwebpya.icuscore 28· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “stripe”
Mediumwendrastique.cyouscore 28· blocked the probe
TLD with a high abuse rate “cyou”brand in page title, not in the name “cloudflare”
Mediumwentsupplierburden10.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumwfoodscorp.cyouscore 28· blocked the probe
TLD with a high abuse rate “cyou”brand in page title, not in the name “cloudflare”
Mediumwhereusersat.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “slack”
Mediumwhsys6.boatsscore 28· blocked the probe
TLD with a high abuse rate “boats”brand in page title, not in the name “cloudflare”
Mediumwin138.bondscore 28· other
TLD with a high abuse rate “bond”brand in page title, not in the name “cloudflare”
Mediumwingslift.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumwingslift.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumwoniumeng.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumwoodbine-online.xyzscore 28· blocked the probe
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumwybl8.lolscore 28· blocked the probe
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
Mediumxelvion-cashspark.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumxelvion-goldenfortune.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumxhsp8.yachtsscore 28· blocked the probe
TLD with a high abuse rate “yachts”brand in page title, not in the name “cloudflare”
Mediumxlsp8.buzzscore 28· blocked the probe
TLD with a high abuse rate “buzz”brand in page title, not in the name “cloudflare”
punycode name “vídeo-inspeção-de-esgoto-mdc scripts=LAT”many hyphens “4”very long name “28”
Mediumxoilacchamtv.lolscore 28· blocked the probe
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
Mediumxrys5.motorcyclesscore 28· blocked the probe
TLD with a high abuse rate “motorcycles”brand in page title, not in the name “cloudflare”
Mediumxsy426.clickscore 28· server error
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumxxcffurl.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumxyzsp7.boatsscore 28· blocked the probe
TLD with a high abuse rate “boats”brand in page title, not in the name “cloudflare”
Mediumyeetonhood.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumyorvexa-goldenstar.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumyorvexa-luckytreasure.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumzaia.winscore 28· blocked the probe
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”
Mediumzaviron-goldenluck.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumzaviron-goldentreasure.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumzaviron-luckycoin.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumzejie.xyzscore 28· server error
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumzilo2daili2.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumzilo2hezuo.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumzilo2zonghoutai.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumzio.homesscore 28· active website
TLD with a high abuse rate “homes”brand in page title, not in the name “whatsapp”
Mediumzlsp7.yachtsscore 28· blocked the probe
TLD with a high abuse rate “yachts”brand in page title, not in the name “cloudflare”
Mediumzmmrfurl.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumzoompacks.xyzscore 28· blocked the probe
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumzoqckurl.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumzurkata.icuscore 28· empty page
TLD with a high abuse rate “icu”brand in page title, not in the name “telegram”
Mediumzx97.skinscore 28· blocked the probe
TLD with a high abuse rate “skin”brand in page title, not in the name “cloudflare”
punycode name “นําเข้าสินค้าอเมริกา scripts=THAI”very long name “34”random-looking name “H=4.29”
punycode name “บิ๊กคลีนหาดใหญ่สงขลา scripts=THAI”very long name “35”random-looking name “H=4.10”
punycode name “รถตู้เช่านครศรีธรรมราชศรีทองกุลทรานสปอร์”very long name “62”random-looking name “H=4.36”
punycode name “北京永真公益基金会 scripts=CJK”very long name “32”random-looking name “H=4.35”
punycode name “北京生物医学工程学会 scripts=CJK”very long name “33”random-looking name “H=4.24”
punycode name “北京青藤谷禧干细胞科技研究院 scripts=CJK”very long name “47”random-looking name “H=4.62”
punycode name “北京市通州区教师研修网 scripts=CJK”very long name “39”random-looking name “H=4.31”
punycode name “南京康尼新能源汽车零部件有限公司 scripts=CJK”very long name “54”random-looking name “H=4.68”

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.