Flagged newborn domains, Wednesday, September 2, 2026
9,056 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “西安三环科技开发总公司 scripts=CJK”very long name “39”
punycode name “中油集团管材研究所 scripts=CJK”very long name “32”
punycode name “中国石油管材研究所 scripts=CJK”very long name “31”
punycode name “中国石油天然气集团公司管材研究所 scripts=CJK”very long name “52”
punycode name “gouttièresrevêtementlaprairie scripts=LA”very long name “29”
punycode name “행복한공인중개사사무소 scripts=HANGUL”very long name “37”
punycode name “زراعةالأسنانتركيا scripts=ARABIC”very long name “28”
punycode name “jrengenhariaeletricaeautomação scripts=L”very long name “30”
punycode name “ถ่ายทอดสดฟุตบอล scripts=THAI”very long name “28”
punycode name “견본주택방문예약 scripts=HANGUL”very long name “29”
punycode name “اطفالالانابيبتركيا scripts=ARABIC”very long name “30”
punycode name “جراحةالعمودالفقريتركيا scripts=ARABIC”very long name “33”
punycode name “여기여공식바로가기 scripts=HANGUL”very long name “30”
punycode name “여기여주소가이드 scripts=HANGUL”very long name “28”
punycode name “필리핀카지노에이전트 scripts=HANGUL”very long name “33”
punycode name “필리핀카지노에이전시 scripts=HANGUL”very long name “34”
punycode name “인천공항택시에버그린 scripts=HANGUL”very long name “34”
punycode name “청라아크원푸르지오 scripts=HANGUL”very long name “31”
punycode name “신태양노인주간보호센터 scripts=HANGUL”very long name “39”
punycode name “德国斯派克分析仪器 scripts=CJK”very long name “31”
punycode name “石家庄市银河变性淀粉 scripts=CJK”very long name “36”
TLD with a high abuse rate “buzz”login form “has_form+login words”
page impersonates a brand “Netflix”
page impersonates a brand “Coinbase”
page impersonates a brand “MetaMask”
random-looking name “H=3.63”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services”very long name “30”random-looking name “H=3.71”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “uniswap”
brand in page title, not in the name “chatgpt”
brand in page title, not in the name “whatsapp”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “click”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “godaddy”
Same data as JSON: /api/zone/risk?day=2026-09-02&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.