Flagged newborn domains, Friday, August 28, 2026

9,218 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name클릭하고치킨받기 scripts=HANGULvery long name29
Lowxn--2e0b85uusar74a9pai7cj4i041a.shopscore 22· boilerplate page
punycode name명지리구아어학원 scripts=HANGULvery long name31
punycode name힐스테이트구월 scripts=HANGULvery long name28
punycode name해피콜전국화물콜센터 scripts=HANGULvery long name35
punycode name세계직장선교센터 scripts=HANGULvery long name28
punycode name엘리프검단포레듀모델하우스 scripts=HANGULvery long name45
punycode name万物良品销售小助手 scripts=CJKvery long name33
punycode namechristellerochethérapeuteetdecoupleprativery long name55
punycode nameдетскисензоренкъткъмтдк scripts=CYRILLICvery long name31
punycode namedelshipperatucamiónsinbrokers scripts=LAvery long name29
punycode namegledemasoneríaregulardelguayas scripts=Lvery long name30
punycode name천안아이파크홈페이지 scripts=HANGULvery long name32
punycode nameşirinvemehmetalidüğündavetiyesi scripts=very long name31
punycode nameลอตเตอรี่วินเนอร์ scripts=THAIvery long name29
punycode nameميامينللتبريدوصيانةغسالاتوتصليحثلاجات scvery long name51
Lowxn--o39aob76untfbqdhx5ae5cy5sy8h.sitescore 22· registrar placeholder
punycode name강남디저트가라오케 scripts=HANGULvery long name32
Lowxn--o39aq20awuar2mo7fntbk8ayyam4ctysbio.shopscore 22· boilerplate page
punycode name참조은재가방문요양센터 scripts=HANGULvery long name39
Lowxn--s39axa14d262bb0d50hlyl0lddpz7zjklc.shopscore 22· boilerplate page
punycode name감곡한마음주간보호센터 scripts=HANGULvery long name38
punycode nameunidadnacionalparalagestióndelriesgodedevery long name47
Lowxn--v69a63ax2june61ak71biohbre43al71d.shopscore 22· boilerplate page
punycode name종로금거래소동탄역점 scripts=HANGULvery long name37
Lowyativorastium.websitescore 22· active website
page impersonates a brandCoinbase
Lowyebo.nycscore 22· active website
page impersonates a brandPayPal
Lowzeus138ancient.workscore 22· active website
TLD with a high abuse rateworklogin formhas_form+login words
Lowzxcode.xyzscore 22· active website
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowgb-crypto-pay-casino-site-play.sitescore 21· redirects elsewhere
lure words (login, verify, secure…)paymany hyphens5very long name30random-looking nameH=3.67
Low100x100.sitescore 20· server error
brand in page title, not in the namecloudflare
Low11xmovies.guruscore 20· blocked the probe
brand in page title, not in the namecloudflare
Low13addressissue-customs.appscore 20· blocked the probe
brand in page title, not in the namecloudflare
Low1b2h2wj.qponscore 20· blocked the probe
brand in page title, not in the namecloudflare
Low1gom.moescore 20· server error
brand in page title, not in the namecloudflare
Low1monkeyevolution.wikiscore 20· active website
brand in page title, not in the nameroblox
Low24go.sitescore 20· active website
brand in page title, not in the nametelegram
Low2708thomas.shopscore 20· active website
brand in page title, not in the namenamecheap
Low2708thomasyates.shopscore 20· active website
brand in page title, not in the namenamecheap
Low27thomasyates08.shopscore 20· active website
brand in page title, not in the namenamecheap
Low2jb2gtj.qponscore 20· blocked the probe
brand in page title, not in the namecloudflare
Low2perguntinha.shopscore 20· active website
brand in page title, not in the namewhatsapp
Low30minutinho.shopscore 20· active website
brand in page title, not in the namewhatsapp
Low3dmaps.appscore 20· active website
brand in page title, not in the nametiktok
Low3kiwhuy.qponscore 20· blocked the probe
brand in page title, not in the namecloudflare
Low3perguntinha.shopscore 20· active website
brand in page title, not in the namewhatsapp
Low3xbet.lovescore 20· active website
brand in page title, not in the namewordpress
Low401k.capitalscore 20· active website
brand in page title, not in the namerobinhood
Low47eueg.qponscore 20· blocked the probe
brand in page title, not in the namecloudflare
Low5ey3ek.qponscore 20· blocked the probe
brand in page title, not in the namecloudflare
Low5perguntinha.shopscore 20· active website
brand in page title, not in the namewhatsapp
Low7perguntinha.shopscore 20· active website
brand in page title, not in the namewhatsapp
Low98sgame.sitescore 20· active website
brand in page title, not in the namenamecheap
Low9sport.storescore 20· other
brand in page title, not in the namecloudflare
Low9www.storescore 20· other
brand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.