Flagged newborn domains, Sunday, September 6, 2026
11,067 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “pirbazar.garden”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
nameserver domain born the same day “skydns5.info”
brand in the name “authenticator”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
brand in the name “etsy”identical page on many newborns “32 identical pages”
lure words (login, verify, secure…) “service,services”very long name “29”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “account”many hyphens “9”very long name “63”TLD with a high abuse rate “lol”
very long name “33”brand in page title, not in the name “facebook”
lure words (login, verify, secure…) “official”many hyphens “3”very long name “31”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “support”many hyphens “3”very long name “35”TLD with a high abuse rate “click”
brand in the name “amazon”identical page on many newborns “769 identical pages”
punycode name “方程之衍 scripts=CJK”lure words (login, verify, secure…) “logon”
punycode name “matrimonio-angie-y-germán scripts=LATIN”many hyphens “3”
punycode name “tupeña scripts=LATIN”form submits over plain HTTP “http://xn--tupea-rta.com/”
punycode name “tupeña scripts=LATIN”form submits over plain HTTP “http://xn--tupea-rta.online/”
punycode name “享逸科技 scripts=CJK”random-looking name “H=3.64”
punycode name “ธีราวุฒิทุบตึก scripts=THAI”random-looking name “H=3.85”
punycode name “พระมหาชนก scripts=THAI”random-looking name “H=3.75”
punycode name “全民爱米 scripts=CJK”random-looking name “H=3.77”
punycode name “全民电玩 scripts=CJK”random-looking name “H=3.91”
punycode name “다있소렌탈 scripts=HANGUL”random-looking name “H=3.84”
punycode name “부동산박사 scripts=HANGUL”random-looking name “H=3.85”
punycode name “폰테크몰 scripts=HANGUL”random-looking name “H=3.62”
punycode name “食在石海 scripts=CJK”random-looking name “H=3.75”
punycode name “닥터플러스 scripts=HANGUL”random-looking name “H=4.06”
punycode name “一味千年 scripts=CJK”random-looking name “H=3.66”
punycode name “卖房小站 scripts=CJK”random-looking name “H=3.64”
punycode name “조립식주택 scripts=HANGUL”random-looking name “H=3.93”
punycode name “南宫集团官网 scripts=CJK”random-looking name “H=3.88”
Same data as JSON: /api/zone/risk?day=2026-09-06&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.