Flagged newborn domains, Thursday, September 3, 2026

12,129 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “yalıkavakveteriner scripts=LATIN”
punycode name “ジーマップ scripts=KATAKANA/KATAKANA-HIRAGANA”
Lowxn--yeta1009a38n.onlinescore 18· no DNS
punycode name “小小赤鸢 scripts=CJK”
Lowxn--yety21g.appscore 18· blocked the probe
punycode name “小花 scripts=CJK”
Lowxn--yety84g.comscore 18
punycode name “小落 scripts=CJK”
Lowxn--yety84g.vipscore 18· active website
punycode name “小落 scripts=CJK”
punycode name “词元智库 scripts=CJK”
punycode name “词元启元 scripts=CJK”
punycode name “元梦空间 scripts=CJK”
Lowxn--z69ar6j.comscore 18
punycode name “달건 scripts=HANGUL”
punycode name “문실장 scripts=HANGUL”
punycode name “碳回购 scripts=CJK”
punycode name “zeitwohnen-köln scripts=LATIN”
Lowxn--zeitwohnen-kln-6pb.orgscore 18· active website
punycode name “zeitwohnen-köln scripts=LATIN”
punycode name “산삼진 scripts=HANGUL”
punycode name “德勤税务 scripts=CJK”
Lowxn--zonguldakdolandrc-qvcbb.shopscore 18· no web server
punycode name “zonguldakdolandırıcı scripts=LATIN”
Lowxn--zsr252ba.vipscore 18· active website
punycode name “周星星 scripts=CJK”
punycode name “zuckerstübchen scripts=LATIN”
punycode name “özyurtotokurtarma scripts=LATIN”
Lowzaglyani-emu-v-golovu-online.homesscore 18· no web server
many hyphens “4”very long name “28”TLD with a high abuse rate “homes”
Low369952welcomerastreodigitalmax630296.clickscore 17· active website
very long name “36”random-looking name “H=4.20”TLD with a high abuse rate “click”
Lowgwp168royal-livingstonehotel.funscore 17· empty page
very long name “28”random-looking name “H=4.03”TLD with a high abuse rate “fun”
Lowkn6x8vuxztwrkiv6wtwktfwej9waxwegrvzh.topscore 17· not probed yet
very long name “36”random-looking name “H=3.99”TLD with a high abuse rate “top”
very long name “36”random-looking name “H=4.02”TLD with a high abuse rate “top”
Low02-09play-casino.buzzscore 16· active website
TLD with a high abuse rate “buzz”free DNS provider “dnsowl.com”
Low0bfu7.topscore 16· no DNS
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low0g0y7.topscore 16· no web server
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low0p281.topscore 16· robots.txt denied
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low0v7ay.topscore 16· no web server
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low11tk.xyzscore 16· boilerplate page
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
Low138qc.xyzscore 16· no DNS
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
Low146377.xyzscore 16· active website
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
Low15933cn.cfdscore 16· no DNS
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low171x1.topscore 16· robots.txt denied
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low1group.cyouscore 16· robots.txt denied
TLD with a high abuse rate “cyou”free DNS provider “dnsowl.com”
Low1iksbet-nbt3.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-ndq8.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-nfa2.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-ngi4.cfdscore 16· empty page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-nlh5.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-nli2.cfdscore 16· empty page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-nso3.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-ntu8.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-nwz5.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-nyv7.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1iksbet-nzk5.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1li7r.topscore 16· no web server
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low1win126.funscore 16· blocked the probe
TLD with a high abuse rate “fun”free DNS provider “dnsowl.com”
Low1win238.funscore 16· blocked the probe
TLD with a high abuse rate “fun”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.