Flagged newborn domains, Wednesday, September 9, 2026

9,947 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name양천구정형외과 scripts=HANGULrandom-looking nameH=4.05
Lowxn--vcsp3sl8ez79c.vipscore 23· redirects elsewhere
punycode name怀星国际 scripts=CJKrandom-looking nameH=3.64
punycode name아이스사이트 scripts=HANGULrandom-looking nameH=3.65
punycode name에이스사이트 scripts=HANGULrandom-looking nameH=3.92
Lowxn--vf4ba69dl6r73r.asiascore 23· empty page
punycode name손해사정사 scripts=HANGULrandom-looking nameH=3.75
punycode name地产信息产业 scripts=CJKrandom-looking nameH=3.85
punycode name文化信息产业 scripts=CJKrandom-looking nameH=3.79
Lowxn--vhq3ml5am75bdjg2tn.comscore 23· no DNS
punycode name旅游信息产业 scripts=CJKrandom-looking nameH=4.02
punycode name能源信息产业 scripts=CJKrandom-looking nameH=3.82
Lowxn--vhq3mlyi8s107a.xn--nqv7fscore 23· no DNS
punycode name供热产业园 scripts=CJKrandom-looking nameH=4.00
punycode name水果行业网商 scripts=CJKrandom-looking nameH=3.92
punycode name부산휴대폰성지 scripts=HANGULrandom-looking nameH=4.17
Lowxn--vk1b42y74fqwa50i06nfwf.comscore 23· active website
punycode name청주휴대폰성지 scripts=HANGULrandom-looking nameH=4.05
punycode name인천휴대폰성지 scripts=HANGULrandom-looking nameH=4.08
punycode name더대표홈페이지 scripts=HANGULrandom-looking nameH=4.17
punycode name서울휴대폰성지 scripts=HANGULrandom-looking nameH=3.97
punycode name대장바로 scripts=HANGULrandom-looking nameH=3.64
punycode name대장방문 scripts=HANGULrandom-looking nameH=3.62
punycode name江西日用百货 scripts=CJKrandom-looking nameH=4.07
punycode name绿色水果产销链 scripts=CJKrandom-looking nameH=3.97
punycode name印象威尼斯 scripts=CJKrandom-looking nameH=3.84
punycode name京东人工智能 scripts=CJKrandom-looking nameH=3.72
punycode name海丝福船 scripts=CJKrandom-looking nameH=3.64
Lowxn--yhq277eojirvi.xn--vhquvscore 23· no DNS
punycode name海丝福船 scripts=CJKrandom-looking nameH=3.64
Lowxn--z92b113apkfqsc.comscore 23· blocked the probe
punycode name포천문화 scripts=HANGULrandom-looking nameH=3.88
punycode name육성전문 scripts=HANGULrandom-looking nameH=3.64
punycode name문서편집 scripts=HANGULrandom-looking nameH=3.77
punycode name와와코칭센터 scripts=HANGULrandom-looking nameH=3.82
punycode name카센터주소 scripts=HANGULrandom-looking nameH=3.85
punycode name새일꾼복지회 scripts=HANGULrandom-looking nameH=3.88
Low2299adobedam.comscore 22echoes adobe
brand in the nameadobebrand plus digits2299adobedam
Low25jokers4d.topscore 22· active website
TLD with a high abuse ratetoplogin formhas_form+login words
Low25jokers4d.xyzscore 22· active website
TLD with a high abuse ratexyzlogin formhas_form+login words
Low40wede303.topscore 22· active website
TLD with a high abuse ratetoplogin formhas_form+login words
Low40wede303.xyzscore 22· active website
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowabcollective.agencyscore 22· active website
page impersonates a brandNETFLIX
Lowaccrued.tradescore 22· active website
page impersonates a brandMetaMask
Lowacwq.topscore 22· active website
TLD with a high abuse ratetoplogin formhas_form+login words
Lowairsentry.shopscore 22· active website
page impersonates a brandPaypal
Lowakunlaku.storescore 22· active website
page impersonates a brandNetflix
Lowaltpola777.xyzscore 22· active website
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowbeaconkapitholmcanada.sitescore 22· active website
page impersonates a brandCoinbase
Lowbos138spin.cyouscore 22· active website
TLD with a high abuse ratecyoulogin formhas_form+login words
Lowbrandonpalisg24gmaill.comscore 22echoes gmail
brand in the namegmailbrand plus digitsbrandonpalisg24gmaill
Lowbriandoyle.xyzscore 22· active website
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowbrittofy.comscore 22· active website
page impersonates a brandNETFLIX
Lowbrookfield-wrk.infoscore 22· active website
page impersonates a brandDHL
Lowcaozuo7.xyzscore 22· boilerplate page
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowcaozuo8.xyzscore 22· boilerplate page
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowcarbon-ledger.techscore 22echoes ledger· active website
ambiguous brand wordledgerform on a brand-styled pagehas_form

Same data as JSON: /api/zone/risk?day=2026-09-09&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.