Flagged newborn domains, Wednesday, September 2, 2026

9,056 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

many hyphens “3”very long name “39”TLD with a high abuse rate “xyz”
many hyphens “3”very long name “33”TLD with a high abuse rate “xyz”
Lowqastaff-systemqa-74881441-mhoghjf.xyzscore 18· registrar placeholder
many hyphens “3”very long name “33”TLD with a high abuse rate “xyz”
Lowqastaff-systemqa-74881441-rtesz.xyzscore 18· registrar placeholder
many hyphens “3”very long name “31”TLD with a high abuse rate “xyz”
Lowqastaff-systemqa-74881442-jgrxvws.xyzscore 18· registrar placeholder
many hyphens “3”very long name “33”TLD with a high abuse rate “xyz”
Lowqastaff-systemqa-74881443-gxwysdm.xyzscore 18· registrar placeholder
many hyphens “3”very long name “33”TLD with a high abuse rate “xyz”
Lowqastaff-systemqa-74881443-ksqjqfx.xyzscore 18· registrar placeholder
many hyphens “3”very long name “33”TLD with a high abuse rate “xyz”
many hyphens “3”very long name “37”TLD with a high abuse rate “xyz”
many hyphens “3”very long name “37”TLD with a high abuse rate “xyz”
many hyphens “4”very long name “39”TLD with a high abuse rate “xyz”
many hyphens “4”very long name “39”TLD with a high abuse rate “xyz”
many hyphens “3”very long name “37”TLD with a high abuse rate “xyz”
many hyphens “3”very long name “37”TLD with a high abuse rate “xyz”
many hyphens “3”very long name “38”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “service,services,support”
lure words (login, verify, secure…) “account,accounts,security”
lure words (login, verify, secure…) “service,services”many hyphens “3”
Lowrobinhood.restscore 18echoes robinhood· no web server
brand in the name “robinhood”TLD with a high abuse rate “rest”
lure words (login, verify, secure…) “service,services,support”
lure words (login, verify, secure…) “service,services,support”
Lowtaksi-pod-prikrytiem-vse-serii.skinscore 18· no web server
many hyphens “4”very long name “30”TLD with a high abuse rate “skin”
Lowteoriya-bolshogo-vzryva-online.homesscore 18· no web server
many hyphens “3”very long name “30”TLD with a high abuse rate “homes”
Lowteslatires.shopscore 18· active website
form on a brand-styled page “has_form”
Lowtlaaccountingservices.comscore 18· no web server
lure words (login, verify, secure…) “account,service,services”
Lowtrezor.autosscore 18echoes trezor· no DNS
brand in the name “trezor”TLD with a high abuse rate “autos”
many hyphens “3”very long name “34”TLD with a high abuse rate “autos”
many hyphens “3”very long name “38”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “validation”very long name “40”TLD with a high abuse rate “cfd”
Lowverificationservices.systemsscore 18· active website
lure words (login, verify, secure…) “service,services,verification”
lure words (login, verify, secure…) “delivery,service,services”
Lowvisparkum-t-coclouda-tadeltaum.topscore 18· robots.txt denied
many hyphens “3”very long name “30”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “delivery,service,services”
punycode name “קדושת-ישראל scripts=HEBREW”
Lowxn----4mcpaliz8g9bp.onlinescore 18· robots.txt denied
punycode name “تسديد-قروض scripts=ARABIC”
punycode name “남성역-헤르니티 scripts=HANGUL”
Lowxn----7sb3apdagjk5cxc.artscore 18· boilerplate page
punycode name “точка-опоры scripts=CYRILLIC”
Lowxn----7sbabtadxt7baqdzcq2al.onlinescore 18· robots.txt denied
punycode name “архитектура-дохода scripts=CYRILLIC”
Lowxn----7sbcsaocgqwcb2b0ae.onlinescore 18· active website
punycode name “билайн-интернет scripts=CYRILLIC”
punycode name “натяжні-стелі scripts=CYRILLIC”
Lowxn----8sbei2b1ans6a.sitescore 18· empty page
punycode name “мвд-штраф scripts=CYRILLIC”
Lowxn----nmcqbaar1amu2a8psa4c2a.sitescore 18· active website
punycode name “ديكورات-الاحساء scripts=ARABIC”
punycode name “동탄역-헤리움센트럴 scripts=HANGUL”
punycode name “รวยจัง-168 scripts=THAI”
punycode name “강남007 scripts=HANGUL”
punycode name “大赢家0149885 scripts=CJK”
Lowxn--0ns831ciriyi1a.comscore 18· no DNS
punycode name “铎境清禾 scripts=CJK”
punycode name “지원금10만원받기 scripts=HANGUL”
punycode name “えじやん1218 scripts=HIRAGANA”
punycode name “กอล์ฟสด scripts=THAI”
punycode name “เทศกาล scripts=THAI”

Same data as JSON: /api/zone/risk?day=2026-09-02&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.