Flagged newborn domains, Sunday, September 6, 2026
11,067 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
form on a brand-styled page “has_form”
lure words (login, verify, secure…) “customer,customers,support”
many hyphens “3”very long name “32”TLD with a high abuse rate “skin”
brand in the name “postnl”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “delivery,service,services”
lure words (login, verify, secure…) “claim,service,services”
lure words (login, verify, secure…) “recover,recovery,support”
lure words (login, verify, secure…) “recover,recovery,validation”
lure words (login, verify, secure…) “recover,recovery,service,services”
lure words (login, verify, secure…) “limited,service,services”
form on a brand-styled page “has_form”
lure words (login, verify, secure…) “service,services,support”
form on a brand-styled page “has_form”
many hyphens “3”very long name “30”TLD with a high abuse rate “icu”
lure words (login, verify, secure…) “locked,track,unlock”
many hyphens “3”very long name “32”free DNS provider “dnsowl.com”
many hyphens “3”very long name “34”free DNS provider “dnsowl.com”
many hyphens “3”very long name “30”TLD with a high abuse rate “hair”
many hyphens “3”very long name “29”TLD with a high abuse rate “click”
lure words (login, verify, secure…) “account,service,services”
lure words (login, verify, secure…) “payment,payments,verify”
lure words (login, verify, secure…) “tax,update”many hyphens “3”
lure words (login, verify, secure…) “delivery,service,services”
many hyphens “3”very long name “29”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “password,recover,recovery”
lure words (login, verify, secure…) “recover,recovery,service”
punycode name “репетитор-начальных-классов scripts=CYRI”
punycode name “вок-н-ролл scripts=CYRILLIC”
punycode name “보안-센터 scripts=HANGUL”
punycode name “бизнес-старость scripts=CYRILLIC”
punycode name “мрд-завод scripts=CYRILLIC”
punycode name “время-перемен scripts=CYRILLIC”
punycode name “李志-个人简历 scripts=CJK”
punycode name “честные-люди scripts=CYRILLIC”
punycode name “대전-쌍용더플래티넘네이처 scripts=HANGUL”
punycode name “인증-센터 scripts=HANGUL”
punycode name “고객-지원 scripts=HANGUL”
punycode name “تاكسي-العارضيه scripts=ARABIC”
punycode name “эвакуатор-911 scripts=CYRILLIC”
punycode name “自宅 scripts=CJK”
punycode name “罗莱 scripts=CJK”
punycode name “114casìbom scripts=LATIN”
punycode name “เฮงเฮง131 scripts=THAI”
punycode name “过若淘 scripts=CJK”
punycode name “糖心 scripts=CJK”
punycode name “糖心 scripts=CJK”
punycode name “糖心 scripts=CJK”
punycode name “心茧 scripts=CJK”
punycode name “เจ้าสัว168 scripts=THAI”
punycode name “โบ๊ะบ๊ะ168 scripts=THAI”
Same data as JSON: /api/zone/risk?day=2026-09-06&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.