Flagged newborn domains, Thursday, August 27, 2026
17,538 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “künstlicheallgemeineintelligenz scripts=”very long name “31”
punycode name “หลุดโอลี่แฟนนนน scripts=THAI”very long name “29”
punycode name “รับผลิตเต็นท์ผ้าใบ scripts=THAI”very long name “33”
punycode name “nationaler-widerstand-zweibrücken script”very long name “33”
punycode name “nilüfersutesisatıyapıdekorasyon scripts=”very long name “29”
punycode name “山西大健康商城网 scripts=CJK”very long name “29”
punycode name “가나안보험퍼미션 scripts=HANGUL”very long name “30”
punycode name “카지노솔루션바로가기 scripts=HANGUL”very long name “36”
punycode name “대구다은재가방문요양 scripts=HANGUL”very long name “36”
punycode name “창원한신더휴메가센텀 scripts=HANGUL”very long name “35”
punycode name “안성공도라포르테 scripts=HANGUL”very long name “29”
punycode name “山西高山农特产专供网 scripts=CJK”very long name “33”
punycode name “전주아르티엠라테라스 scripts=HANGUL”very long name “34”
punycode name “마석역라온프라이빗 scripts=HANGUL”very long name “31”
punycode name “成都真皮沙发网 scripts=CJK”very long name “28”
punycode name “무주펜션산새소리 scripts=HANGUL”very long name “28”
punycode name “prevengaaccidenteseléctricos scripts=LAT”very long name “28”
punycode name “陕西腐植酸肥料网 scripts=CJK”very long name “30”
punycode name “揭阳环保经济投资网 scripts=CJK”very long name “33”
punycode name “安徽民航保安服务网 scripts=CJK”very long name “32”
punycode name “江西民航保安服务网 scripts=CJK”very long name “32”
punycode name “江西环保德阳纸箱包装商城网 scripts=CJK”very long name “45”
punycode name “富硒保健品商城网 scripts=CJK”very long name “28”
punycode name “富硒保健食品商城网 scripts=CJK”very long name “32”
punycode name “广州养身保健品商城网 scripts=CJK”very long name “35”
punycode name “山西保健养生文化网 scripts=CJK”very long name “31”
punycode name “광주남구노인주간보호센터 scripts=HANGUL”very long name “40”
punycode name “svenskatändsticksbolagetörsäljningsaktie”very long name “45”
punycode name “ココ・レストラン予約センター scripts=CJK/KATAKANA/KATA”very long name “33”
punycode name “힐스테이트거제시그니처 scripts=HANGUL”very long name “38”
punycode name “广州生态农业科技产业园网 scripts=CJK”very long name “39”
punycode name “成都有机葡萄酒网 scripts=CJK”very long name “29”
punycode name “空手道培训信息网 scripts=CJK”very long name “29”
punycode name “东莞山水田园旅游网 scripts=CJK”very long name “31”
punycode name “山东现代物流商城网 scripts=CJK”very long name “32”
many hyphens “4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
many hyphens “3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
page impersonates a brand “DHL”
many hyphens “4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
many hyphens “3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
random-looking name “H=3.82”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
one-letter brand typo “finance≈binance”brand name at a retail registrar “Amazon Registrar, Inc.”brand's own DNS (reduces score) “ns-1211.awsdns-23.org”
one-letter brand typo “finance≈binance”brand name at a retail registrar “Amazon Registrar, Inc.”brand's own DNS (reduces score) “ns-1064.awsdns-05.org”
one-letter brand typo “finance≈binance”brand name at a retail registrar “Amazon Registrar, Inc.”brand's own DNS (reduces score) “ns-1513.awsdns-61.org”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “win”many hyphens “4”TLD with a high abuse rate “click”
lure words (login, verify, secure…) “win”many hyphens “3”TLD with a high abuse rate “sbs”
lure words (login, verify, secure…) “win”many hyphens “3”TLD with a high abuse rate “xyz”
Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.