Flagged newborn domains, Wednesday, September 9, 2026

9,947 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowtyiigoods.comscore 22· active website
page impersonates a brandPaypal
Lowusahaprediksitotomacau.camscore 22· active website
TLD with a high abuse ratecamlogin formhas_form+login words
Lowvdsb-d8-s8v-sd8-v-svdsd.topscore 22· boilerplate page
many hyphens5TLD with a high abuse ratetopfree DNS providerdnsowl.com
Lowvdsvsd-v8-ds8v-sd8vsvd.topscore 22· boilerplate page
many hyphens3TLD with a high abuse ratetopfree DNS providerdnsowl.com
Lowventurofondariamexico.sitescore 22· active website
page impersonates a brandCoinbase
Lowvibranthitsfortune.shopscore 22· active website
page impersonates a brandPayPal
Lowviceglobal.sitescore 22· active website
page impersonates a brandMetaMask
Lowvoidsystem.techscore 22· active website
page impersonates a brandMetaMask
Lowvoxpanel.sitescore 22· active website
page impersonates a brandPayPal
Lowwallrichlawgroup.orgscore 22· active website
page impersonates a brandPayPal
Lowwamiaimmobilier.contactscore 22· active website
page impersonates a brandPayPal
Lowwcnyn1.buzzscore 22· boilerplate page
TLD with a high abuse ratebuzzlogin formhas_form+login words
Lowwcnyn1.xyzscore 22· boilerplate page
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowwe-soar.orgscore 22· active website
page impersonates a brandIRS
Lowweenperk.spacescore 22· active website
page impersonates a brandPayPal
Lowwegorich.shopscore 22· active website
page impersonates a brandPayPal
Lowwewad.orgscore 22· active website
page impersonates a brandIRS
Lowwhiteduck.funscore 22· active website
TLD with a high abuse ratefunlogin formhas_form+login words
Lowwillowbrook.infoscore 22· active website
page impersonates a brandDHL
Lowwilltoway.orgscore 22· active website
page impersonates a brandIRS
Lowwin1x1.onlinescore 22· active website
page impersonates a brandPayPal
Lowxn--289ayk413c67a1hk1mnpaw0i.shopscore 22· boilerplate page
punycode name심재경영어교습소 scripts=HANGULvery long name28
punycode name한국요양보호사협회 scripts=HANGULvery long name32
punycode name浙江省善经济发展协会 scripts=CJKvery long name33
punycode nameรับสร้างบ้านระยอง scripts=THAIvery long name30
punycode nameasesoríasintegralesenrecursosfluviales svery long name38
punycode name울산자동차검사소 scripts=HANGULvery long name28
Lowxn--c79an5jjjq4noonepjhypa161d.shopscore 22· empty page
punycode name검단더샵레이크파크 scripts=HANGULvery long name30
Lowxn--contactoayudandonioshondureos-n1cj.orgscore 22· parked, for sale
punycode namecontactoayudandoniñoshondureños scripts=very long name31
punycode name绿色水果种植振兴网 scripts=CJKvery long name32
punycode name宜宾市大学生三人制女子篮球超级联赛 scripts=CJKvery long name54
punycode name宜宾市大学生三人制女子篮球联赛 scripts=CJKvery long name48
punycode name宜宾市大学生三人制女子篮球赛 scripts=CJKvery long name45
punycode name宜宾大学生三人制女子篮球超级联赛 scripts=CJKvery long name51
punycode name宜宾大学生三人制女子篮球赛 scripts=CJKvery long name42
punycode name宜宾大学生三人制女子篮球联赛 scripts=CJKvery long name45
punycode name宜宾大学生三人制男子篮球超级联赛 scripts=CJKvery long name50
punycode name宜宾大学生三人制男子篮球联赛 scripts=CJKvery long name44
punycode name宜宾市大学生三人制男子篮球超级联赛 scripts=CJKvery long name53
punycode name宜宾市大学生三人制男子篮球联赛 scripts=CJKvery long name47
punycode name宜宾市大学生三人制男子篮球赛 scripts=CJKvery long name44
punycode name宜宾大学生三人制篮球联赛 scripts=CJKvery long name40
punycode name宜宾大学生三人制篮球赛 scripts=CJKvery long name37
punycode name宜宾大学生三人制篮球超级联赛 scripts=CJKvery long name46
punycode name宜宾市大学生三人制篮球超级联赛 scripts=CJKvery long name49
punycode name宜宾市大学生三人制篮球联赛 scripts=CJKvery long name43
punycode name宜宾市大学生三人制篮球赛 scripts=CJKvery long name40
Lowxn--l89axdm03b69kbrbs9abji83a5nt14b4yc.shopscore 22· boilerplate page
punycode name애견용품창고형할인매장 scripts=HANGULvery long name38
Lowxn--mgbaacch6ccm3nebmi8ej87af.sitescore 22· robots.txt denied
punycode nameتاكسي٠مبارك٠الكبير scripts=ARABICvery long name29
punycode name엘에스일렉트릭사무노동조합 scripts=HANGULvery long name44

Same data as JSON: /api/zone/risk?day=2026-09-09&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.