Flagged newborn domains, Saturday, September 26, 2026

2,201 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediummobile-cake.comscore 28echoes tmobile
one-letter brand typo “mobile≈tmobile”
Mediummobile-e-cloud.comscore 28echoes icloud
one-letter brand typo “cloud≈icloud”
Mediummobile-vs.comscore 28echoes tmobile
one-letter brand typo “mobile≈tmobile”
Mediummorviba.sbsscore 28· boilerplate page
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
Mediummusaid.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “slack”
Mediummusegod.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediummusepad.clickscore 28· empty page
TLD with a high abuse rate “click”brand in page title, not in the name “robinhood”
Mediummusimtogel-situs.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “namecheap”
Mediummygroup11.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumnameastar.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumnamemy.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “tiktok”
Mediumnavigatorcu-claim.cfdscore 28· boilerplate page
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “cfd”login form “has_form+login words”
Mediumnavigatorcu-verify.cfdscore 28· boilerplate page
lure words (login, verify, secure…) “verify”TLD with a high abuse rate “cfd”login form “has_form+login words”
Mediumneonfaces.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumnexobet.autosscore 28· blocked the probe
TLD with a high abuse rate “autos”brand in page title, not in the name “cloudflare”
Mediumnibi-net.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumniceduck.skinscore 28· active website
TLD with a high abuse rate “skin”brand in page title, not in the name “chatgpt”
Mediumnohu52.workscore 28· server error
TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”
Mediumnokheng789.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumnorduvo.lolscore 28· boilerplate page
TLD with a high abuse rate “lol”brand in page title, not in the name “telegram”
Mediumntrcrm-postback.sitescore 28echoes postbank· boilerplate page
one-letter brand typo “postback≈postbank”
Mediumobjectpad.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumobrion.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “roblox”
Mediumoffarabut.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
Mediumok365nhacai.camscore 28· server error
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Mediumokanc.buzzscore 28· active website
TLD with a high abuse rate “buzz”brand in page title, not in the name “chatgpt”
Mediumokoka.monsterscore 28· active website
TLD with a high abuse rate “monster”brand in page title, not in the name “telegram”
Mediumoluwatosinanimashaun.xyzscore 28· other
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumomahas.homesscore 28· other
TLD with a high abuse rate “homes”brand in page title, not in the name “cloudflare”
Mediumonemillioncats.xyzscore 28· other
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumonlyninelives.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumoperix.lolscore 28· blocked the probe
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
Mediumoptions.bidscore 28· active website
TLD with a high abuse rate “bid”brand in page title, not in the name “openai”
Mediumoslobet964.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Mediumoutyook.comscore 28echoes outlook
one-letter brand typo “outyook≈outlook”
Mediumpaidinx.funscore 28· other
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
Mediumparvi.topscore 28· active website
TLD with a high abuse rate “top”brand in page title, not in the name “robinhood”
Mediumpasiona.xyzscore 28· empty page
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”
Mediumpaytobearer.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumpearonrbh.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumpl-oferta726243.cfdscore 28· blocked the probe
TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”
Mediumpl8721.cyouscore 28· empty page
TLD with a high abuse rate “cyou”brand in page title, not in the name “google”
Mediumplayjonny-it.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumplaykeno.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumpokeoptions.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “chase”
Mediumpokeronpons.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumponpix.funscore 28· empty page
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumponstories.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “robinhood”
Mediumpoolslaunchpad.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “uniswap”
Mediumposygifts.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “uniswap”

Same data as JSON: /api/zone/risk?day=2026-09-26&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.