Flagged newborn domains, Friday, September 11, 2026
2,790 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “yachts”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “yachts”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
random-looking name “H=4.00”page impersonates a brand “Office365”
punycode name “หวยวันนี้ออกอะไร scripts=THAI”very long name “29”random-looking name “H=3.81”
punycode name “ขายส่งกระดาษทิชชู่ scripts=THAI”very long name “34”random-looking name “H=4.20”
punycode name “แทงหวยจับยี่กี scripts=THAI”very long name “28”random-looking name “H=3.92”
punycode name “หวยเลขเด็ดงวดนี้ scripts=THAI”very long name “31”random-looking name “H=3.95”
punycode name “หวยออนไลน์คืออะไร scripts=THAI”very long name “30”random-looking name “H=4.01”
punycode name “ระบบบริหารคดีชุด scripts=THAI”very long name “30”random-looking name “H=3.69”
punycode name “英澤科技系統工程有限公司 scripts=CJK”very long name “42”random-looking name “H=4.46”
punycode name “揭阳市金库科技有限公司 scripts=CJK”very long name “39”random-looking name “H=4.38”
punycode name “永康市嘉易工贸有限公司 scripts=CJK”very long name “39”random-looking name “H=4.23”
punycode name “โรงพิมพ์บิลศาลายา scripts=THAI”very long name “28”random-looking name “H=3.98”
punycode name “รีวิวเว็บแทงหวยออนไลน์ scripts=THAI”very long name “39”random-looking name “H=3.91”
punycode name “เว็ปแทงหวยออนไลน์ scripts=THAI”very long name “33”random-looking name “H=3.98”
punycode name “ลําพระเพลิงรีสอร์ท scripts=THAI”very long name “31”random-looking name “H=3.65”
punycode name “รีวิวหวยออนไลน์จ่ายจริง scripts=THAI”very long name “39”random-looking name “H=3.84”
punycode name “เว็บหวยออนไลน์จ่ายจริง scripts=THAI”very long name “39”random-looking name “H=4.08”
punycode name “เว็บเฮงเจริญพลัส scripts=THAI”very long name “31”random-looking name “H=3.64”
punycode name “ร้านพวงหรีดหน้าวัดโยธินประดิษฐ์ scripts=”very long name “50”random-looking name “H=4.28”
punycode name “เอ็นพีเอ็นปิดโพรงบ้าน scripts=THAI”very long name “35”random-looking name “H=3.88”
punycode name “漳州云顶温泉大酒店 scripts=CJK”very long name “33”random-looking name “H=4.35”
punycode name “여주로제비앙더센텀 scripts=HANGUL”very long name “33”random-looking name “H=4.28”
punycode name “周末游绑卡对接端口 scripts=CJK”very long name “29”random-looking name “H=3.93”
punycode name “레드벨벳평생주소 scripts=HANGUL”very long name “30”random-looking name “H=4.11”
punycode name “广西电力市场分析 scripts=CJK”very long name “29”random-looking name “H=3.88”
punycode name “꽁머니지급사이트 scripts=HANGUL”very long name “28”random-looking name “H=4.29”
punycode name “中国新能源产业信息网 scripts=CJK”very long name “33”random-looking name “H=4.41”
punycode name “江西省建筑工业学校 scripts=CJK”very long name “33”random-looking name “H=4.26”
punycode name “山西农产品开发平台 scripts=CJK”very long name “32”random-looking name “H=4.03”
punycode name “新疆运输服务平台 scripts=CJK”very long name “30”random-looking name “H=4.11”
lure words (login, verify, secure…) “billing”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “win”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “payment”brand in page title, not in the name “booking”
lure words (login, verify, secure…) “login”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “reward,rewards”page pushes urgent payment “Claim your Reward”
lure words (login, verify, secure…) “limited”brand in page title, not in the name “google”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “wallet”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “limited”brand in page title, not in the name “google”
lure words (login, verify, secure…) “limited”brand in page title, not in the name “google”
lure words (login, verify, secure…) “service”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “limited”brand in page title, not in the name “google”
lure words (login, verify, secure…) “official”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “reset”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “access”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “delivery”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “delivery”brand in page title, not in the name “twitter”
Same data as JSON: /api/zone/risk?day=2026-09-11&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.