Flagged newborn domains, Friday, September 4, 2026

12,463 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “温江区第三人民医院 scripts=CJK”very long name “33”
punycode name “아만서울레지던스 scripts=HANGUL”very long name “29”
punycode name “中国民族民间医药 scripts=CJK”very long name “30”
punycode name “广西食品药品审评查验中心 scripts=CJK”very long name “41”
punycode name “青羊实验中学附小 scripts=CJK”very long name “29”
punycode name “中国教育经济信息网 scripts=CJK”very long name “32”
punycode name “深港产学研基地培训中心 scripts=CJK”very long name “39”
punycode name “都市文化研究中心 scripts=CJK”very long name “30”
punycode name “苏州附属中学美国课程中心 scripts=CJK”very long name “42”
punycode name “南京大学中国新文学研究中心 scripts=CJK”very long name “42”
punycode name “中国竞争政策研究中心 scripts=CJK”very long name “33”
punycode name “国家非粮生物质能源工程技术研究中心 scripts=CJK”very long name “57”
punycode name “中航光电科技股份有限公司 scripts=CJK”very long name “41”
punycode name “北京国泰民康安全技术中心 scripts=CJK”very long name “39”
punycode name “国家地震活动断层研究中心 scripts=CJK”very long name “40”
Lowxn--grandesobraspequeosartistas-5uc.shopscore 22· placeholder page
punycode name “grandesobraspequeñosartistas scripts=LAT”very long name “28”
Lowxn--h49ay7gmrck3n1lhhvgmufqrx30d.shopscore 22· boilerplate page
punycode name “퍼스널개별지도학원 scripts=HANGUL”very long name “32”
punycode name “mas-gebäudereinigung-fellbach scripts=LA”very long name “29”
Lowxn--mas-gebudereinigung-fellbach-cnc.globalscore 22· registrar placeholder
punycode name “mas-gebäudereinigung-fellbach scripts=LA”very long name “29”
Lowxn--mas-gebudereinigung-fellbach-cnc.storescore 22· registrar placeholder
punycode name “mas-gebäudereinigung-fellbach scripts=LA”very long name “29”
punycode name “다인카지노평생주소 scripts=HANGUL”very long name “33”
Lowxn--o80bz50a9oa38a85hkyfepbg2tcpm.comscore 22· redirects elsewhere
punycode name “에스카지노평생주소 scripts=HANGUL”very long name “33”
punycode name “푸우카지노평생주소 scripts=HANGUL”very long name “33”
punycode name “소닉카지노평생주소 scripts=HANGUL”very long name “32”
punycode name “바카라사이트추천 scripts=HANGUL”very long name “29”
punycode name “투자사기피해회복 scripts=HANGUL”very long name “28”
punycode name “tarjetaprofesionalconstrucción scripts=L”very long name “30”
Lowxn--tarjetaprofesionalconstruccin-n3c.infoscore 22· redirects elsewhere
punycode name “tarjetaprofesionalconstrucción scripts=L”very long name “30”
Lowxn--tarjetaprofesionalconstruccin-n3c.storescore 22· redirects elsewhere
punycode name “tarjetaprofesionalconstrucción scripts=L”very long name “30”
punycode name “农业大数据产业技术创新战略联盟 scripts=CJK”very long name “50”
punycode name “湖北省地质环境信息网 scripts=CJK”very long name “35”
Lowyouzi.lovescore 22· active website
page impersonates a brand “Apple ID”
Lowzenithal.lolscore 22· active website
TLD with a high abuse rate “lol”free DNS provider “dnsowl.com”form submits over plain HTTP “https://zenithal.lol/”
Lowzephyrx.lolscore 22· active website
TLD with a high abuse rate “lol”free DNS provider “dnsowl.com”form submits over plain HTTP “https://zephyrx.lol/”
Lowzhulubang.xyzscore 22echoes hulu· not probed yet
brand in the name “hulu”TLD with a high abuse rate “xyz”
Lowzirevonia-ai.sitescore 22· active website
page impersonates a brand “Coinbase”
Lowzmokrulven-japan.sitescore 22· active website
page impersonates a brand “Coinbase”
Lowzoogvpncn.orgscore 22· active website
page impersonates a brand “Netflix”
Low1rjtdqzwxe-ma60l6s.icuscore 21· no DNS
random-looking name “H=3.97”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
Low6gyl19s-scuvdr9yop92ew.icuscore 21· no DNS
random-looking name “H=3.98”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
Lowj0f5jrmhsyh7k67pc6orr.lolscore 21· no DNS
random-looking name “H=3.78”TLD with a high abuse rate “lol”free DNS provider “dnsowl.com”
Lownwhd4r6gcujmai5d6x21fj.cfdscore 21· no DNS
random-looking name “H=4.19”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low0903sheilastewart.shopscore 20· active website
brand in page title, not in the name “namecheap”
Low09sheilastewart03.shopscore 20· active website
brand in page title, not in the name “namecheap”
Low0xrji2v.picsscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low11jepangbet.sitescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low11jepangbet.spacescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low123b1.greenscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low18abe694.betscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low1dinoevolution.wikiscore 20· active website
brand in page title, not in the name “roblox”

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.