Flagged newborn domains, Wednesday, September 9, 2026

9,947 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowtyiigoods.comscore 22· active website
page impersonates a brand “Paypal”
Lowusahaprediksitotomacau.camscore 22· active website
TLD with a high abuse rate “cam”login form “has_form+login words”
Lowvdsb-d8-s8v-sd8-v-svdsd.topscore 22· boilerplate page
many hyphens “5”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Lowvdsvsd-v8-ds8v-sd8vsvd.topscore 22· boilerplate page
many hyphens “3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Lowventurofondariamexico.sitescore 22· active website
page impersonates a brand “Coinbase”
Lowvibranthitsfortune.shopscore 22· active website
page impersonates a brand “PayPal”
Lowviceglobal.sitescore 22· active website
page impersonates a brand “MetaMask”
Lowvoidsystem.techscore 22· active website
page impersonates a brand “MetaMask”
Lowvoxpanel.sitescore 22· active website
page impersonates a brand “PayPal”
Lowwallrichlawgroup.orgscore 22· active website
page impersonates a brand “PayPal”
Lowwamiaimmobilier.contactscore 22· active website
page impersonates a brand “PayPal”
Lowwcnyn1.buzzscore 22· boilerplate page
TLD with a high abuse rate “buzz”login form “has_form+login words”
Lowwcnyn1.xyzscore 22· boilerplate page
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowwe-soar.orgscore 22· active website
page impersonates a brand “IRS”
Lowweenperk.spacescore 22· active website
page impersonates a brand “PayPal”
Lowwegorich.shopscore 22· active website
page impersonates a brand “PayPal”
Lowwewad.orgscore 22· active website
page impersonates a brand “IRS”
Lowwhiteduck.funscore 22· active website
TLD with a high abuse rate “fun”login form “has_form+login words”
Lowwillowbrook.infoscore 22· active website
page impersonates a brand “DHL”
Lowwilltoway.orgscore 22· active website
page impersonates a brand “IRS”
Lowwin1x1.onlinescore 22· active website
page impersonates a brand “PayPal”
Lowxn--289ayk413c67a1hk1mnpaw0i.shopscore 22· boilerplate page
punycode name “심재경영어교습소 scripts=HANGUL”very long name “28”
punycode name “한국요양보호사협회 scripts=HANGUL”very long name “32”
punycode name “浙江省善经济发展协会 scripts=CJK”very long name “33”
punycode name “รับสร้างบ้านระยอง scripts=THAI”very long name “30”
punycode name “asesoríasintegralesenrecursosfluviales s”very long name “38”
punycode name “울산자동차검사소 scripts=HANGUL”very long name “28”
Lowxn--c79an5jjjq4noonepjhypa161d.shopscore 22· empty page
punycode name “검단더샵레이크파크 scripts=HANGUL”very long name “30”
Lowxn--contactoayudandonioshondureos-n1cj.orgscore 22· parked, for sale
punycode name “contactoayudandoniñoshondureños scripts=”very long name “31”
punycode name “绿色水果种植振兴网 scripts=CJK”very long name “32”
punycode name “宜宾市大学生三人制女子篮球超级联赛 scripts=CJK”very long name “54”
punycode name “宜宾市大学生三人制女子篮球联赛 scripts=CJK”very long name “48”
punycode name “宜宾市大学生三人制女子篮球赛 scripts=CJK”very long name “45”
punycode name “宜宾大学生三人制女子篮球超级联赛 scripts=CJK”very long name “51”
punycode name “宜宾大学生三人制女子篮球赛 scripts=CJK”very long name “42”
punycode name “宜宾大学生三人制女子篮球联赛 scripts=CJK”very long name “45”
punycode name “宜宾大学生三人制男子篮球超级联赛 scripts=CJK”very long name “50”
punycode name “宜宾大学生三人制男子篮球联赛 scripts=CJK”very long name “44”
punycode name “宜宾市大学生三人制男子篮球超级联赛 scripts=CJK”very long name “53”
punycode name “宜宾市大学生三人制男子篮球联赛 scripts=CJK”very long name “47”
punycode name “宜宾市大学生三人制男子篮球赛 scripts=CJK”very long name “44”
punycode name “宜宾大学生三人制篮球联赛 scripts=CJK”very long name “40”
punycode name “宜宾大学生三人制篮球赛 scripts=CJK”very long name “37”
punycode name “宜宾大学生三人制篮球超级联赛 scripts=CJK”very long name “46”
punycode name “宜宾市大学生三人制篮球超级联赛 scripts=CJK”very long name “49”
punycode name “宜宾市大学生三人制篮球联赛 scripts=CJK”very long name “43”
punycode name “宜宾市大学生三人制篮球赛 scripts=CJK”very long name “40”
Lowxn--l89axdm03b69kbrbs9abji83a5nt14b4yc.shopscore 22· boilerplate page
punycode name “애견용품창고형할인매장 scripts=HANGUL”very long name “38”
Lowxn--mgbaacch6ccm3nebmi8ej87af.sitescore 22· robots.txt denied
punycode name “تاكسي٠مبارك٠الكبير scripts=ARABIC”very long name “29”
punycode name “엘에스일렉트릭사무노동조합 scripts=HANGUL”very long name “44”

Same data as JSON: /api/zone/risk?day=2026-09-09&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.