Flagged newborn domains, Friday, September 4, 2026
2,907 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “杭州市省府路小学 scripts=CJK”very long name “29”random-looking name “H=3.74”
punycode name “秦皇岛市第一医院 scripts=CJK”very long name “30”random-looking name “H=3.82”
punycode name “江苏创新驱动决策咨询研究基地 scripts=CJK”very long name “48”random-looking name “H=4.69”
punycode name “รถตู้ท่องเที่ยว scripts=THAI”very long name “29”random-looking name “H=3.61”
punycode name “吉林科学技术出版社 scripts=CJK”very long name “32”random-looking name “H=4.55”
punycode name “广西三七综合利用技术重点实验室 scripts=CJK”very long name “51”random-looking name “H=4.32”
punycode name “만하임피아노교습소 scripts=HANGUL”very long name “33”random-looking name “H=4.22”
punycode name “智能家居云平台支付收款端口 scripts=CJK”very long name “42”random-looking name “H=4.45”
punycode name “더킹플러스평생주소 scripts=HANGUL”very long name “32”random-looking name “H=4.35”
punycode name “쇼미더벳평생주소 scripts=HANGUL”very long name “29”random-looking name “H=4.21”
punycode name “中国科学院上海交叉学科研究中心 scripts=CJK”very long name “47”random-looking name “H=4.58”
punycode name “上海高亚建筑设计事务所 scripts=CJK”very long name “37”random-looking name “H=4.73”
punycode name “上海网络视听产业基地 scripts=CJK”very long name “36”random-looking name “H=4.03”
punycode name “上海临港再制造产业示范基地 scripts=CJK”very long name “43”random-looking name “H=4.54”
punycode name “上海市奉贤区反邪教协会 scripts=CJK”very long name “36”random-looking name “H=4.62”
punycode name “上海洋泾社区公益基金会 scripts=CJK”very long name “39”random-looking name “H=4.41”
punycode name “上海世济医学检验所 scripts=CJK”very long name “33”random-looking name “H=4.16”
punycode name “水下文化遗产保护中心 scripts=CJK”very long name “33”random-looking name “H=4.37”
punycode name “清华大学就业与社会保障研究中心 scripts=CJK”very long name “50”random-looking name “H=4.63”
punycode name “战略性新兴产业培育与发展网 scripts=CJK”very long name “44”random-looking name “H=4.59”
punycode name “苏州市高等教育与职业教育网 scripts=CJK”very long name “45”random-looking name “H=4.41”
punycode name “크롬하츠평생주소 scripts=HANGUL”very long name “29”random-looking name “H=4.61”
punycode name “地震台阵探测实验室 scripts=CJK”very long name “32”random-looking name “H=4.23”
punycode name “珠海市香洲世家幼学园 scripts=CJK”very long name “36”random-looking name “H=4.42”
punycode name “湖北省电力勘测设计院 scripts=CJK”very long name “35”random-looking name “H=4.35”
punycode name “京都レンタサイクルさがし scripts=CJK/HIRAGANA/KATAKA”very long name “32”random-looking name “H=4.42”
punycode name “战略性新兴产业网 scripts=CJK”very long name “28”random-looking name “H=4.13”
punycode name “重庆电讯职业学院 scripts=CJK”very long name “30”random-looking name “H=4.21”
punycode name “雅思建筑规划设计 scripts=CJK”very long name “30”random-looking name “H=4.14”
punycode name “联合国艾滋病规划署 scripts=CJK”very long name “32”random-looking name “H=4.28”
punycode name “东南大学应用心理研究所 scripts=CJK”very long name “38”random-looking name “H=4.43”
punycode name “이안스카이원서산 scripts=HANGUL”very long name “28”random-looking name “H=3.85”
lure words (login, verify, secure…) “access”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “account”brand in page title, not in the name “quickbooks”
lure words (login, verify, secure…) “support”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “click”form on a brand-styled page “has_form”
lure words (login, verify, secure…) “service”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “access”brand in page title, not in the name “instagram”
lure words (login, verify, secure…) “service”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “delivery”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-09-04&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.