Flagged newborn domains, Thursday, August 27, 2026
17,538 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “扶危济残 scripts=CJK”random-looking name “H=3.64”
punycode name “哲学小镇网 scripts=CJK”random-looking name “H=3.73”
punycode name “易捷加油站 scripts=CJK”random-looking name “H=3.95”
punycode name “荣济展览 scripts=CJK”random-looking name “H=3.77”
punycode name “蚕丝家纺商城网 scripts=CJK”random-looking name “H=4.21”
punycode name “静丝贸易 scripts=CJK”random-looking name “H=3.88”
punycode name “来都来了 scripts=CJK”random-looking name “H=3.91”
punycode name “风来了 scripts=CJK”random-looking name “H=3.70”
punycode name “딴지방송 scripts=HANGUL”random-looking name “H=3.64”
punycode name “เสื้อลาย scripts=THAI”random-looking name “H=3.62”
punycode name “腐植酸网 scripts=CJK”random-looking name “H=3.62”
punycode name “天元证券 scripts=CJK”random-looking name “H=3.66”
punycode name “江西元宝枫网 scripts=CJK”random-looking name “H=3.88”
punycode name “溏心次元 scripts=CJK”random-looking name “H=3.64”
punycode name “元超水电 scripts=CJK”random-looking name “H=3.75”
punycode name “松元工業 scripts=CJK”random-looking name “H=3.77”
punycode name “涪城麦冬网 scripts=CJK”random-looking name “H=3.84”
punycode name “山西麦冬网 scripts=CJK”random-looking name “H=4.04”
punycode name “핑크문입장 scripts=HANGUL”random-looking name “H=3.73”
punycode name “평생핑크문 scripts=HANGUL”random-looking name “H=3.68”
punycode name “초보운전방문연수 scripts=HANGUL”random-looking name “H=4.13”
punycode name “방문연수 scripts=HANGUL”random-looking name “H=3.66”
punycode name “핑크문토토 scripts=HANGUL”random-looking name “H=3.68”
punycode name “핑크문사이트 scripts=HANGUL”random-looking name “H=4.17”
punycode name “문장사이 scripts=HANGUL”random-looking name “H=3.66”
punycode name “문서서비스통합 scripts=HANGUL”random-looking name “H=4.00”
punycode name “더샵관저아르테 scripts=HANGUL”random-looking name “H=4.05”
punycode name “친구네사진관 scripts=HANGUL”random-looking name “H=3.82”
punycode name “小燕回家 scripts=CJK”random-looking name “H=3.81”
punycode name “泓川证券 scripts=CJK”random-looking name “H=3.64”
punycode name “智驾服务 scripts=CJK”random-looking name “H=4.00”
punycode name “特色旅游网 scripts=CJK”random-looking name “H=3.62”
punycode name “旅游租车网 scripts=CJK”random-looking name “H=3.73”
punycode name “陕西旅游租车网 scripts=CJK”random-looking name “H=4.18”
punycode name “护士学校网 scripts=CJK”random-looking name “H=3.84”
punycode name “참조은페이퍼 scripts=HANGUL”random-looking name “H=4.14”
punycode name “重庆柑橘苗木网 scripts=CJK”random-looking name “H=4.16”
brand in the name “revolut”brand plus digits “12minuterevolution”
brand in the name “tmobile”brand plus digits “365fastmobilenotary”
TLD with a high abuse rate “xyz”login form “has_form+login words”
TLD with a high abuse rate “work”login form “has_form+login words”
lure words (login, verify, secure…) “account”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “account”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “account”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “account,limited,service,services”very long name “31”
lure words (login, verify, secure…) “account,authenticate,logon”very long name “30”
free DNS provider “dnsowl.com”login form “has_form+login words”
free DNS provider “dnsowl.com”login form “has_form+login words”
lure words (login, verify, secure…) “service,services”many hyphens “3”very long name “39”
page impersonates a brand “NetFlix”
Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.