Flagged newborn domains, Friday, August 28, 2026

9,218 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “클릭하고치킨받기 scripts=HANGUL”very long name “29”
Lowxn--2e0b85uusar74a9pai7cj4i041a.shopscore 22· boilerplate page
punycode name “명지리구아어학원 scripts=HANGUL”very long name “31”
punycode name “힐스테이트구월 scripts=HANGUL”very long name “28”
punycode name “해피콜전국화물콜센터 scripts=HANGUL”very long name “35”
punycode name “세계직장선교센터 scripts=HANGUL”very long name “28”
punycode name “엘리프검단포레듀모델하우스 scripts=HANGUL”very long name “45”
punycode name “万物良品销售小助手 scripts=CJK”very long name “33”
punycode name “christellerochethérapeuteetdecoupleprati”very long name “55”
punycode name “детскисензоренкъткъмтдк scripts=CYRILLIC”very long name “31”
punycode name “delshipperatucamiónsinbrokers scripts=LA”very long name “29”
punycode name “gledemasoneríaregulardelguayas scripts=L”very long name “30”
punycode name “천안아이파크홈페이지 scripts=HANGUL”very long name “32”
punycode name “şirinvemehmetalidüğündavetiyesi scripts=”very long name “31”
punycode name “ลอตเตอรี่วินเนอร์ scripts=THAI”very long name “29”
punycode name “ميامينللتبريدوصيانةغسالاتوتصليحثلاجات sc”very long name “51”
Lowxn--o39aob76untfbqdhx5ae5cy5sy8h.sitescore 22· registrar placeholder
punycode name “강남디저트가라오케 scripts=HANGUL”very long name “32”
Lowxn--o39aq20awuar2mo7fntbk8ayyam4ctysbio.shopscore 22· boilerplate page
punycode name “참조은재가방문요양센터 scripts=HANGUL”very long name “39”
Lowxn--s39axa14d262bb0d50hlyl0lddpz7zjklc.shopscore 22· boilerplate page
punycode name “감곡한마음주간보호센터 scripts=HANGUL”very long name “38”
punycode name “unidadnacionalparalagestióndelriesgodede”very long name “47”
Lowxn--v69a63ax2june61ak71biohbre43al71d.shopscore 22· boilerplate page
punycode name “종로금거래소동탄역점 scripts=HANGUL”very long name “37”
Lowyativorastium.websitescore 22· active website
page impersonates a brand “Coinbase”
Lowyebo.nycscore 22· active website
page impersonates a brand “PayPal”
Lowzeus138ancient.workscore 22· active website
TLD with a high abuse rate “work”login form “has_form+login words”
Lowzxcode.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowgb-crypto-pay-casino-site-play.sitescore 21· redirects elsewhere
lure words (login, verify, secure…) “pay”many hyphens “5”very long name “30”random-looking name “H=3.67”
Low100x100.sitescore 20· server error
brand in page title, not in the name “cloudflare”
Low11xmovies.guruscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low13addressissue-customs.appscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low1b2h2wj.qponscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low1gom.moescore 20· server error
brand in page title, not in the name “cloudflare”
Low1monkeyevolution.wikiscore 20· active website
brand in page title, not in the name “roblox”
Low24go.sitescore 20· active website
brand in page title, not in the name “telegram”
Low2708thomas.shopscore 20· active website
brand in page title, not in the name “namecheap”
Low2708thomasyates.shopscore 20· active website
brand in page title, not in the name “namecheap”
Low27thomasyates08.shopscore 20· active website
brand in page title, not in the name “namecheap”
Low2jb2gtj.qponscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low2perguntinha.shopscore 20· active website
brand in page title, not in the name “whatsapp”
Low30minutinho.shopscore 20· active website
brand in page title, not in the name “whatsapp”
Low3dmaps.appscore 20· active website
brand in page title, not in the name “tiktok”
Low3kiwhuy.qponscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low3perguntinha.shopscore 20· active website
brand in page title, not in the name “whatsapp”
Low3xbet.lovescore 20· active website
brand in page title, not in the name “wordpress”
Low401k.capitalscore 20· active website
brand in page title, not in the name “robinhood”
Low47eueg.qponscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low5ey3ek.qponscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low5perguntinha.shopscore 20· active website
brand in page title, not in the name “whatsapp”
Low7perguntinha.shopscore 20· active website
brand in page title, not in the name “whatsapp”
Low98sgame.sitescore 20· active website
brand in page title, not in the name “namecheap”
Low9sport.storescore 20· other
brand in page title, not in the name “cloudflare”
Low9www.storescore 20· other
brand in page title, not in the name “cloudflare”

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.