Flagged newborn domains, Tuesday, September 8, 2026
11,571 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
brand in the name “schwab”identical page on many newborns “86 identical pages”
brand in the name “schwab”identical page on many newborns “86 identical pages”
lure words (login, verify, secure…) “secure”form on a brand-styled page “has_form”
lure words (login, verify, secure…) “limited”many hyphens “3”very long name “34”TLD with a high abuse rate “sbs”
brand in the name “lineme”identical page on many newborns “1520 identical pages”
lure words (login, verify, secure…) “support”many hyphens “4”very long name “34”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “security”many hyphens “3”very long name “30”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “security”many hyphens “6”very long name “48”TLD with a high abuse rate “top”
many hyphens “3”very long name “31”login form “has_form+login words”
punycode name “bajramigebäudeservice scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “le-bon-coté-du-coin scripts=LATIN”many hyphens “4”
punycode name “plaçavella scripts=LATIN”form submits over plain HTTP “http://xn--plaavella-s3a.online/”
punycode name “zādhomeslimited scripts=LATIN”lure words (login, verify, secure…) “limited”
lure words (login, verify, secure…) “security”many hyphens “6”very long name “48”TLD with a high abuse rate “top”
many hyphens “3”very long name “31”random-looking name “H=3.80”TLD with a high abuse rate “lol”
many hyphens “4”very long name “34”random-looking name “H=3.69”TLD with a high abuse rate “lol”
lure words (login, verify, secure…) “claim,claims,recover,recovery”random-looking name “H=3.88”
many hyphens “4”very long name “38”random-looking name “H=3.66”TLD with a high abuse rate “lol”
punycode name “思劢迩 scripts=CJK”random-looking name “H=3.70”
punycode name “ลูกพี่ scripts=THAI”random-looking name “H=3.66”
punycode name “ร้านกุญแจนครปฐม scripts=THAI”random-looking name “H=4.08”
punycode name “ผ้าทอบ้านกร่าง scripts=THAI”random-looking name “H=3.73”
punycode name “全球跨境电商 scripts=CJK”random-looking name “H=3.75”
punycode name “พัดลมฟาร์มขับตรง scripts=THAI”random-looking name “H=4.22”
punycode name “모모평생아카데미 scripts=HANGUL”random-looking name “H=3.97”
punycode name “마루마루주소 scripts=HANGUL”random-looking name “H=3.61”
punycode name “레디언트팀 scripts=HANGUL”random-looking name “H=3.73”
punycode name “와이앤씨미디어 scripts=HANGUL”random-looking name “H=4.28”
punycode name “芝麻问事 scripts=CJK”random-looking name “H=3.64”
punycode name “어울림싱크 scripts=HANGUL”random-looking name “H=3.83”
punycode name “어울림씽크 scripts=HANGUL”random-looking name “H=3.79”
punycode name “ดวงเจริญญ scripts=THAI”random-looking name “H=3.79”
punycode name “菠萝的海 scripts=CJK”random-looking name “H=3.81”
punycode name “하나통운 scripts=HANGUL”random-looking name “H=3.88”
punycode name “평창농부들 scripts=HANGUL”random-looking name “H=3.73”
punycode name “더좋은교회 scripts=HANGUL”random-looking name “H=3.79”
punycode name “오크바이크 scripts=HANGUL”random-looking name “H=3.85”
punycode name “서바이버팀 scripts=HANGUL”random-looking name “H=3.73”
punycode name “카이져평생 scripts=HANGUL”random-looking name “H=3.79”
punycode name “카이져평생주소 scripts=HANGUL”random-looking name “H=4.09”
punycode name “云霄体育 scripts=CJK”random-looking name “H=3.66”
punycode name “카이져주소 scripts=HANGUL”random-looking name “H=3.85”
punycode name “하이오피주소 scripts=HANGUL”random-looking name “H=3.88”
punycode name “카이져안전주소 scripts=HANGUL”random-looking name “H=3.85”
punycode name “카이져접속주소 scripts=HANGUL”random-looking name “H=3.61”
punycode name “일심힐링원 scripts=HANGUL”random-looking name “H=4.04”
punycode name “ファクタリング即日 scripts=CJK/KATAKANA”random-looking name “H=4.08”
punycode name “스페이스박스 scripts=HANGUL”random-looking name “H=3.68”
punycode name “잉글리시아이 scripts=HANGUL”random-looking name “H=3.92”
punycode name “판매일위비닉스 scripts=HANGUL”random-looking name “H=4.21”
Same data as JSON: /api/zone/risk?day=2026-09-08&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.