Flagged newborn domains, Thursday, September 10, 2026
2,536 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
lure words (login, verify, secure…) “service”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “track”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”form on a brand-styled page “has_form”
TLD with a high abuse rate “top”form on a brand-styled page “has_form”
lure words (login, verify, secure…) “official”brand in page title, not in the name “google”
lure words (login, verify, secure…) “id”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “account,verify”login form “has_form+login words”
lure words (login, verify, secure…) “account”brand in page title, not in the name “cloudflare”
many hyphens “3”very long name “30”TLD with a high abuse rate “work”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “support”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “support”brand in page title, not in the name “cloudflare”
punycode name “終歸是海 scripts=CJK”TLD with a high abuse rate “top”
punycode name “壹境电玩 scripts=CJK”TLD with a high abuse rate “top”
punycode name “壹境電玩 scripts=CJK”TLD with a high abuse rate “top”
punycode name “波羅蜜 scripts=CJK”TLD with a high abuse rate “top”
punycode name “波罗蜜 scripts=CJK”TLD with a high abuse rate “top”
punycode name “风格 scripts=CJK”TLD with a high abuse rate “top”
punycode name “風格 scripts=CJK”TLD with a high abuse rate “top”
punycode name “花漓 scripts=CJK”TLD with a high abuse rate “top”
punycode name “眼角的淚 scripts=CJK”TLD with a high abuse rate “top”
punycode name “抖音学知识 scripts=CJK”TLD with a high abuse rate “top”
punycode name “一团火 scripts=CJK”TLD with a high abuse rate “top”
punycode name “一團火 scripts=CJK”TLD with a high abuse rate “top”
punycode name “九一倫 scripts=CJK”TLD with a high abuse rate “top”
punycode name “九一伦 scripts=CJK”TLD with a high abuse rate “top”
punycode name “橘一 scripts=CJK”TLD with a high abuse rate “top”
punycode name “偶触 scripts=CJK”TLD with a high abuse rate “top”
punycode name “偶觸 scripts=CJK”TLD with a high abuse rate “top”
punycode name “独良 scripts=CJK”TLD with a high abuse rate “top”
punycode name “負贖 scripts=CJK”TLD with a high abuse rate “top”
punycode name “獨兮 scripts=CJK”TLD with a high abuse rate “top”
punycode name “独兮 scripts=CJK”TLD with a high abuse rate “top”
punycode name “龍七對 scripts=CJK”TLD with a high abuse rate “top”
punycode name “龙七对 scripts=CJK”TLD with a high abuse rate “top”
punycode name “残眠 scripts=CJK”TLD with a high abuse rate “top”
punycode name “古柯 scripts=CJK”TLD with a high abuse rate “top”
punycode name “馭帥 scripts=CJK”TLD with a high abuse rate “top”
punycode name “алисажора scripts=CYRILLIC”TLD with a high abuse rate “fun”
punycode name “донат scripts=CYRILLIC”TLD with a high abuse rate “fun”
punycode name “眼角的泪 scripts=CJK”TLD with a high abuse rate “top”
punycode name “爱琴海 scripts=CJK”TLD with a high abuse rate “top”
punycode name “渐慌 scripts=CJK”TLD with a high abuse rate “top”
punycode name “漸慌 scripts=CJK”TLD with a high abuse rate “top”
punycode name “來福士廣場 scripts=CJK”TLD with a high abuse rate “top”
punycode name “來福士 scripts=CJK”TLD with a high abuse rate “top”
punycode name “養老ai scripts=CJK/LATIN”TLD with a high abuse rate “top”
punycode name “养老ai scripts=CJK/LATIN”TLD with a high abuse rate “top”
punycode name “ai短劇 scripts=CJK/LATIN”TLD with a high abuse rate “top”
punycode name “ai直播 scripts=CJK/LATIN”TLD with a high abuse rate “top”
Same data as JSON: /api/zone/risk?day=2026-09-10&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.