Flagged newborn domains, Friday, September 4, 2026
12,463 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “beauty”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “top”brand in page title, not in the name “wordpress”
brand in the name “ionos”brand name on a rarely-seen nameserver “partnerconsole.net”brand name at a retail registrar “Key-Systems GmbH”
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “uniswap”
TLD with a high abuse rate “fun”brand in page title, not in the name “telegram”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “lol”brand in page title, not in the name “whatsapp”
one-letter brand typo “whatsopp≈whatsapp”
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “lol”brand in page title, not in the name “namecheap”
TLD with a high abuse rate “click”brand in page title, not in the name “google”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “win”brand in page title, not in the name “roblox”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
punycode name “รถยกรถสไลด์นครปฐม scripts=THAI”very long name “28”random-looking name “H=4.18”
punycode name “ช่างกุญแจสุรินทร์ scripts=THAI”very long name “32”random-looking name “H=4.06”
punycode name “วัสดุก่อสร้างปทุมธานี scripts=THAI”very long name “38”random-looking name “H=3.88”
punycode name “เที่ยวชิมริมกรุง scripts=THAI”very long name “29”random-looking name “H=3.95”
punycode name “เหรียญพระมหาชนก scripts=THAI”very long name “28”random-looking name “H=4.03”
punycode name “ปั๊กชิวรับเช่าพระ scripts=THAI”very long name “30”random-looking name “H=4.07”
punycode name “北京永真公益基金会 scripts=CJK”very long name “32”random-looking name “H=4.35”
punycode name “北京生物医学工程学会 scripts=CJK”very long name “33”random-looking name “H=4.24”
punycode name “北京市通州区教师研修网 scripts=CJK”very long name “39”random-looking name “H=4.31”
punycode name “南京康尼新能源汽车零部件有限公司 scripts=CJK”very long name “54”random-looking name “H=4.68”
punycode name “사회복지동행사람들 scripts=HANGUL”very long name “31”random-looking name “H=4.38”
punycode name “江苏金源税务师事务所 scripts=CJK”very long name “36”random-looking name “H=4.11”
punycode name “湖南省民族宗教事务委员会 scripts=CJK”very long name “42”random-looking name “H=4.37”
punycode name “ร้านนวดผ่อนคลายเชียงราย scripts=THAI”very long name “38”random-looking name “H=4.10”
Same data as JSON: /api/zone/risk?day=2026-09-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.