Flagged newborn domains, Friday, August 28, 2026
9,218 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “xcumè scripts=LATIN”
punycode name “လမ်းညွှန် scripts=MYANMAR”
punycode name “இரும்பு scripts=TAMIL”
punycode name “华科橡塑 scripts=CJK”
punycode name “华月 scripts=CJK”
punycode name “鑫鲁禹 scripts=CJK”
punycode name “念旧陪伴 scripts=CJK”
punycode name “만듬옷 scripts=HANGUL”
punycode name “金爵 scripts=CJK”
punycode name “胖虎 scripts=CJK”
punycode name “石进 scripts=CJK”
punycode name “yansã scripts=LATIN”
punycode name “yapıcheck scripts=LATIN”
punycode name “yazıcıkiralama scripts=LATIN”
punycode name “yesilbölgemühendislik scripts=LATIN”
punycode name “小追 scripts=CJK”
punycode name “抹小茗 scripts=CJK”
punycode name “小烧饼 scripts=CJK”
punycode name “麥芝連 scripts=CJK”
punycode name “yıldızoto scripts=LATIN”
punycode name “ymcompañiaelectrica scripts=LATIN”
punycode name “문 scripts=HANGUL”
punycode name “방문요양 scripts=HANGUL”
punycode name “핑크문 scripts=HANGUL”
punycode name “剛 scripts=CJK”
punycode name “최산 scripts=HANGUL”
punycode name “최산 scripts=HANGUL”
punycode name “讲者 scripts=CJK”
punycode name “özyakupotomotiv scripts=LATIN”
punycode name “zyvèn scripts=LATIN”
many hyphens “3”very long name “35”TLD with a high abuse rate “homes”
ambiguous brand word “zoom”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”
form on a brand-styled page “has_form”
form on a brand-styled page “has_form”
very long name “32”random-looking name “H=4.10”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.35”TLD with a high abuse rate “cfd”
very long name “32”random-looking name “H=3.69”TLD with a high abuse rate “icu”
very long name “38”random-looking name “H=4.37”TLD with a high abuse rate “cfd”
very long name “39”random-looking name “H=4.51”TLD with a high abuse rate “cyou”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “fun”free DNS provider “dnsowl.com”
TLD with a high abuse rate “lol”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.