Flagged newborn domains, Thursday, September 3, 2026

12 names at tier medium or above in .win, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highhoodboy.winscore 46· active website
TLD with a high abuse ratewinbrand in page title, not in the namerobinhoodform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Medium66785.winscore 28· blocked the probe
TLD with a high abuse ratewinbrand in page title, not in the namecloudflare
Mediumballoontracker.winscore 28· active website
lure words (login, verify, secure…)trackTLD with a high abuse ratewinlogin formhas_form+login words
Mediumbonanza-game.winscore 28· blocked the probe
TLD with a high abuse ratewinbrand in page title, not in the namecloudflare
Mediumchadoptimizer.winscore 28· blocked the probe
TLD with a high abuse ratewinbrand in page title, not in the namecloudflare
Mediumfcceve.winscore 28· server error
TLD with a high abuse ratewinbrand in page title, not in the namecloudflare
Mediumgamersunite.winscore 28· redirects elsewhere
TLD with a high abuse ratewinbrand in page title, not in the namecloudflare
Mediumlatex.winscore 28· active website
TLD with a high abuse ratewinbrand in page title, not in the namerobinhood
Mediummscastdev.winscore 28· server error
TLD with a high abuse ratewinbrand in page title, not in the namecloudflare
Mediumsovereigncodex.winscore 28· server error
TLD with a high abuse ratewinbrand in page title, not in the namecloudflare
Mediumtumugi.winscore 28· blocked the probe
TLD with a high abuse ratewinbrand in page title, not in the namechatgpt
Mediumzaia.winscore 28· blocked the probe
TLD with a high abuse ratewinbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.