Flagged newborn domains, Friday, August 28, 2026

2,271 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumzx888.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumzx999.sbsscore 28· blocked the probe
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumzyntax.winscore 28· redirects elsewhere
TLD with a high abuse rate “win”brand in page title, not in the name “google”
punycode name “รับเหมาถมดินราคาถูก scripts=THAI”very long name “32”random-looking name “H=4.03”
punycode name “ศูนย์กลางพระเครื่อง scripts=THAI”very long name “37”random-looking name “H=4.30”
punycode name “โรงงานถังเก็บน้ําเซฟ scripts=THAI”very long name “35”random-looking name “H=4.29”
punycode name “부산다이어트병원 scripts=HANGUL”very long name “30”random-looking name “H=4.04”
Mediumxn--2j1bpb218a9tg9cp18bj5a45c86ojyj94b500a.shopscore 27· boilerplate page
punycode name “혼다모터사이클청주상당점 scripts=HANGUL”very long name “42”random-looking name “H=4.08”
punycode name “동탄역디에트르퍼스티지 scripts=HANGUL”very long name “36”random-looking name “H=4.36”
punycode name “작심스터디카페서원역점 scripts=HANGUL”very long name “38”random-looking name “H=4.18”
punycode name “逆流性食道炎の治し方 scripts=CJK/HIRAGANA”very long name “36”random-looking name “H=4.40”
punycode name “한화포레나충주호암 scripts=HANGUL”very long name “31”random-looking name “H=4.25”
Mediumxn--910b14la979fmwf0a200b95aje.shopscore 27· boilerplate page
punycode name “레이저아레나안산점 scripts=HANGUL”very long name “30”random-looking name “H=3.85”
punycode name “더파크사이드서울스위트 scripts=HANGUL”very long name “39”random-looking name “H=4.15”
punycode name “오목천역더리브모델하우스 scripts=HANGUL”very long name “41”random-looking name “H=4.25”
punycode name “河北省市场监督管理局 scripts=CJK”very long name “35”random-looking name “H=4.39”
punycode name “问鼎娱乐回收官网 scripts=CJK”very long name “30”random-looking name “H=4.21”
punycode name “ブランド買取徹底比較 scripts=CJK/KATAKANA”very long name “35”random-looking name “H=4.13”
punycode name “이플러스치과의원 scripts=HANGUL”very long name “29”random-looking name “H=4.31”
punycode name “江苏允大酒业集团 scripts=CJK”very long name “30”random-looking name “H=4.42”
punycode name “신용카드잔여한도대출 scripts=HANGUL”very long name “36”random-looking name “H=4.15”
punycode name “东莞钜利科技有限公司 scripts=CJK”very long name “36”random-looking name “H=4.05”
Mediumarab-pay.cardsscore 26· other
lure words (login, verify, secure…) “pay”brand in page title, not in the name “cloudflare”
Mediumbestsafe-wallet.proscore 26· blocked the probe
lure words (login, verify, secure…) “wallet”brand in page title, not in the name “cloudflare”
Mediumbonusfunke.onlinescore 26· blocked the probe
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
Mediumbonusmint.vipscore 26· blocked the probe
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
Mediumbonusripple.infoscore 26· blocked the probe
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
Mediumbys-user-store-544636.storescore 26· other
many hyphens “3”brand in page title, not in the name “cloudflare”
Mediumbys-user-store-549342.storescore 26· other
many hyphens “3”brand in page title, not in the name “cloudflare”
Mediumclaimbreeze.vipscore 26· blocked the probe
lure words (login, verify, secure…) “claim”brand in page title, not in the name “cloudflare”
Mediumclaimnest.sitescore 26· blocked the probe
lure words (login, verify, secure…) “claim”brand in page title, not in the name “cloudflare”
Mediumdelivery-shipswiss.infoscore 26· blocked the probe
lure words (login, verify, secure…) “delivery”brand in page title, not in the name “cloudflare”
Mediumdineshofficialstore.shopscore 26· active website
lure words (login, verify, secure…) “official”brand in page title, not in the name “whatsapp”
Mediumdolewa-d8-mini-printer.storescore 26· other
many hyphens “3”brand in page title, not in the name “cloudflare”
Mediumesl-org-fraud-claims-report.cfdscore 26· no web server
lure words (login, verify, secure…) “claim,claims”many hyphens “4”TLD with a high abuse rate “cfd”
Mediumesl-org-fraud-claims-report.sbsscore 26· no web server
lure words (login, verify, secure…) “claim,claims”many hyphens “4”TLD with a high abuse rate “sbs”
Mediumesl-org-fraud-claims-sms.cfdscore 26· no web server
lure words (login, verify, secure…) “claim,claims”many hyphens “4”TLD with a high abuse rate “cfd”
Mediumesl-org-fraud-claims-sms.sbsscore 26· no web server
lure words (login, verify, secure…) “claim,claims”many hyphens “4”TLD with a high abuse rate “sbs”
Mediumesl-org-fraud-claims.cfdscore 26· no web server
lure words (login, verify, secure…) “claim,claims”many hyphens “3”TLD with a high abuse rate “cfd”
Mediumesl-org-fraud-claims.sbsscore 26· no web server
lure words (login, verify, secure…) “claim,claims”many hyphens “3”TLD with a high abuse rate “sbs”
Mediumfees-delivery.appscore 26· blocked the probe
lure words (login, verify, secure…) “delivery”brand in page title, not in the name “cloudflare”
Mediumfling-things-and-people.wikiscore 26· active website
many hyphens “3”brand in page title, not in the name “roblox”
Mediumggsomasupport.storescore 26· empty page
lure words (login, verify, secure…) “support”brand in page title, not in the name “whatsapp”
Mediumhoodofficial.clubscore 26· active website
lure words (login, verify, secure…) “official”brand in page title, not in the name “telegram”
Mediuminbound-system-portal.digitalscore 26· blocked the probe
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
Mediumkurwa-bonusn.infoscore 26· blocked the probe
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
Mediumkurwa-bonusn.sitescore 26· blocked the probe
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
Mediumkurwa-bonusn.vipscore 26· blocked the probe
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
Mediummslkoltracker.livescore 26· other
lure words (login, verify, secure…) “track”brand in page title, not in the name “cloudflare”
Mediummyna-go-jp-accounts.helpscore 26· no web server
lure words (login, verify, secure…) “account,accounts”many hyphens “3”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.