Flagged newborn domains, Thursday, September 10, 2026
10,814 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
brand in the name “tmobile”very long name “29”
brand in the name “revolut”brand name redirects elsewhere “webnode.cz”
lure words (login, verify, secure…) “security,service,services”
lure words (login, verify, secure…) “security,service,services”
lure words (login, verify, secure…) “alert,alerts,secure”
many hyphens “3”very long name “29”TLD with a high abuse rate “icu”
lure words (login, verify, secure…) “service,services”many hyphens “4”
lure words (login, verify, secure…) “recover,recovery,service”
lure words (login, verify, secure…) “service”very long name “30”TLD with a high abuse rate “lol”
lure words (login, verify, secure…) “reward,rewards,support”
lure words (login, verify, secure…) “service,services,support”
form on a brand-styled page “has_form”
many hyphens “3”very long name “30”TLD with a high abuse rate “skin”
form on a brand-styled page “has_form”
form on a brand-styled page “has_form”
lure words (login, verify, secure…) “delivery,track,tracking”
lure words (login, verify, secure…) “delivery,track,tracking”
lure words (login, verify, secure…) “delivery,track,tracking”
lure words (login, verify, secure…) “payment,payments,verify”
lure words (login, verify, secure…) “customer,customers,support”
punycode name “復縁-電話-占い scripts=CJK/HIRAGANA”
punycode name “простая-психология scripts=CYRILLIC”
punycode name “브레인시티-앤네이처미래도 scripts=HANGUL”
punycode name “苗宇轩-关惠琳 scripts=CJK”
punycode name “жирные-шлюхи scripts=CYRILLIC”
punycode name “комплекс-про scripts=CYRILLIC”
punycode name “поршни-сти scripts=CYRILLIC”
punycode name “崔伦競-童小艳 scripts=CJK”
punycode name “정도파트너스-경기서부본부 scripts=HANGUL”
punycode name “鑫蕾 scripts=CJK”
punycode name “レーズ scripts=KATAKANA/KATAKANA-HIRAGANA”
punycode name “跨境货源 scripts=CJK”
punycode name “壹境电玩 scripts=CJK”
punycode name “노바1 scripts=HANGUL”
punycode name “주소핫1 scripts=HANGUL”
punycode name “中1华物流 scripts=CJK”
punycode name “115casíbom scripts=LATIN”
punycode name “115casỉbom scripts=LATIN”
punycode name “115casibım scripts=LATIN”
punycode name “门盒淘 scripts=CJK”
punycode name “好日子14378 scripts=CJK”
punycode name “良心购 scripts=CJK”
punycode name “良心购 scripts=CJK”
punycode name “良心购 scripts=CJK”
punycode name “良心购 scripts=CJK”
punycode name “เว็บของแทร่168 scripts=THAI”
punycode name “嫩草18 scripts=CJK”
punycode name “영종도신일1833-7063 scripts=HANGUL”
punycode name “耘灵季 scripts=CJK”
punycode name “中街1946 scripts=CJK”
Same data as JSON: /api/zone/risk?day=2026-09-10&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.