Flagged newborn domains, Thursday, September 10, 2026
10,814 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “cekmeköycinarköykurutemizleme scripts=LA”very long name “29”
punycode name “conseilenrénovationénergétique scripts=L”very long name “30”
punycode name “conseilenrénovationénergétique scripts=L”very long name “30”
punycode name “conseilenrénovationénergétique scripts=L”very long name “30”
punycode name “demirantalyakoltukyıkamacomtr scripts=LA”very long name “28”
punycode name “香港算力交易中心 scripts=CJK”very long name “28”
punycode name “算力香港交易中心 scripts=CJK”very long name “28”
punycode name “labulledubiennaître-alizeenael scripts=L”very long name “30”
punycode name “เว็บหวยสล็อตออนไลน์ scripts=THAI”very long name “32”
punycode name “순천한양립스파크포레공식홈페이지 scripts=HANGUL”very long name “52”
punycode name “piedradelpeñolentretenimiento scripts=LA”very long name “29”
punycode name “노피곰잉글리시아이거북 scripts=HANGUL”very long name “37”
punycode name “verificadigital-validaçãovioinf scripts=”very long name “31”
punycode name “werhörtsprichtnicht-wersprichthörtnicht ”very long name “39”
ambiguous brand word “booking”TLD with a high abuse rate “click”identical page on many newborns “36 identical pages”
TLD with a high abuse rate “autos”login form “has_form+login words”
page impersonates a brand “PayPal”
random-looking name “H=3.75”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=3.88”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=3.62”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=3.75”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “chatgpt”
brand in page title, not in the name “roblox”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
brand in page title, not in the name “google”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “hostinger”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “telegram”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-09-10&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.