Flagged newborn domains, Saturday, September 26, 2026

2,201 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumpumpified.funscore 28· other
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
Mediumpuntobahis426.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Mediumpusulabet5010.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Mediumqnmsp8.questscore 28· blocked the probe
TLD with a high abuse rate “quest”brand in page title, not in the name “cloudflare”
Mediumr7-casino-bqa.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumr7-casino-knjv.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumr7-casino-xqd.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumr7cazino-online-w.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumradiantmedicine.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
Mediumrainegg.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumraja717team.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “namecheap”
Mediumrealbahis835.camscore 28· blocked the probe
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
Mediumresecon-cloud.comscore 28echoes icloud
one-letter brand typo “cloud≈icloud”
Mediumringsecurityco.comscore 28· active website
lure words (login, verify, secure…) “security”page impersonates a brand “PayPal”
Mediumrippoke.xyzscore 28· other
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumrobase.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “roblox”
Mediumrpm-mobile.netscore 28echoes tmobile
one-letter brand typo “mobile≈tmobile”
Mediumruta.autosscore 28· active website
TLD with a high abuse rate “autos”brand in page title, not in the name “tesla”
Mediumsadyorc.cyouscore 28· redirects elsewhere
TLD with a high abuse rate “cyou”brand in page title, not in the name “twitter”
Mediumsafirbete-giris.icuscore 28· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “telegram”
Mediumsamjianzhantest.topscore 28· active website
TLD with a high abuse rate “top”brand in page title, not in the name “wordpress”
Mediumsanynews.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”
Mediumsavevid.topscore 28· active website
TLD with a high abuse rate “top”brand in page title, not in the name “facebook”
Mediumscrappyxrp.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “ledger”
Mediumscreenshotclutch.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “apple”
Mediumsecureportal.skinscore 28· boilerplate page
lure words (login, verify, secure…) “portal,secure”lure suffix “secureportal”TLD with a high abuse rate “skin”
Mediumsfjp9.momscore 28· blocked the probe
TLD with a high abuse rate “mom”brand in page title, not in the name “cloudflare”
Mediumshark66.restscore 28· blocked the probe
TLD with a high abuse rate “rest”brand in page title, not in the name “cloudflare”
Mediumsherlock-bot.topscore 28· active website
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”
Mediumsieisaodj1243.winscore 28· active website
TLD with a high abuse rate “win”brand in page title, not in the name “telegram”
Mediumskew-finance.comscore 28echoes binance· no DNS
one-letter brand typo “finance≈binance”
Mediumslab.winscore 28· active website
TLD with a high abuse rate “win”brand in page title, not in the name “chase”
Mediumslotbom77spin.clickscore 28· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumslottocoin.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumsmartsolution.homesscore 28· redirect not followed
TLD with a high abuse rate “homes”brand in page title, not in the name “google”
Mediumsmush.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumsnowly.funscore 28· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Mediumspacexinu.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumspinaniaitaly.topscore 28· blocked the probe
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Mediumspinimax-italia.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumsportzfy.clickscore 28· active website
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”
Mediumsquarepaid.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “booking”
Mediumstackwallet.sitescore 28· active website
lure words (login, verify, secure…) “wallet”page impersonates a brand “Binance”
Mediumsterling-bosch.netscore 28echoes starling
one-letter brand typo “sterling≈starling”
Mediumsterling-meadow.comscore 28echoes starling
one-letter brand typo “sterling≈starling”
Mediumstockapp.funscore 28· server error
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
Mediumstride-gear.comscore 28echoes stripe
one-letter brand typo “stride≈stripe”
Mediumstride-learning.comscore 28echoes stripe
one-letter brand typo “stride≈stripe”
Mediumstride-physio.comscore 28echoes stripe
one-letter brand typo “stride≈stripe”
Mediumstrike-techx.comscore 28echoes stripe
one-letter brand typo “strike≈stripe”

Same data as JSON: /api/zone/risk?day=2026-09-26&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.