Flagged newborn domains, Friday, September 11, 2026
10,818 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
lure words (login, verify, secure…) “bonus”many hyphens “4”very long name “31”TLD with a high abuse rate “top”
brand in the name “lineme”many hyphens “3”very long name “35”
very long name “30”brand in page title, not in the name “cloudflare”
very long name “44”brand in page title, not in the name “cloudflare”
very long name “29”brand in page title, not in the name “google”
very long name “28”brand in page title, not in the name “steam”
lure words (login, verify, secure…) “auth,portal,service”many hyphens “3”
lure words (login, verify, secure…) “security”many hyphens “4”very long name “38”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “signin”many hyphens “4”very long name “36”TLD with a high abuse rate “fun”
lure words (login, verify, secure…) “signin”many hyphens “4”very long name “28”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “official”many hyphens “3”very long name “30”TLD with a high abuse rate “top”
punycode name “3030영어딥매쓰학원 scripts=HANGUL”form submits over plain HTTP “http://xn--3030-t02q01uvzuzmb1t08dp75e.s”
punycode name “홈케어dm scripts=HANGUL/LATIN”form submits over plain HTTP “http://xn--dm-hw7j702aj8i.shop/”
punycode name “itservicelübeck scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “itservicelübeck scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “itservicelübeck scripts=LATIN”lure words (login, verify, secure…) “service”
very long name “28”brand in page title, not in the name “google”
very long name “31”random-looking name “H=4.12”login form “has_form+login words”
punycode name “昌盛运输 scripts=CJK”random-looking name “H=3.64”
punycode name “无障碍环境建设 scripts=CJK”random-looking name “H=4.00”
punycode name “คลิปโป๊เกย์ scripts=THAI”random-looking name “H=4.06”
punycode name “全球数据基金 scripts=CJK”random-looking name “H=3.91”
punycode name “더벳주소안내 scripts=HANGUL”random-looking name “H=3.98”
punycode name “자동차키분실 scripts=HANGUL”random-looking name “H=3.92”
punycode name “루테인지아잔틴 scripts=HANGUL”random-looking name “H=4.14”
punycode name “디씨마켓 scripts=HANGUL”random-looking name “H=3.64”
punycode name “宏福控股集团 scripts=CJK”random-looking name “H=3.73”
punycode name “เย็ดคับ scripts=THAI”random-looking name “H=3.62”
punycode name “中国独一药业 scripts=CJK”random-looking name “H=3.82”
punycode name “江南古镇 scripts=CJK”random-looking name “H=3.64”
punycode name “변호사추천 scripts=HANGUL”random-looking name “H=3.68”
punycode name “来你的岛 scripts=CJK”random-looking name “H=3.64”
punycode name “ผลหวยงวดนี้ scripts=THAI”random-looking name “H=3.88”
punycode name “แทงหวยหุ้นไทย scripts=THAI”random-looking name “H=3.64”
punycode name “ตรวจหวยย้อนหลัง scripts=THAI”random-looking name “H=3.68”
punycode name “หวยลาวจ่ายจริง scripts=THAI”random-looking name “H=3.85”
punycode name “蜻蜓出海 scripts=CJK”random-looking name “H=3.77”
punycode name “시크릿주소 scripts=HANGUL”random-looking name “H=3.84”
punycode name “หวยพร้อมจ่าย scripts=THAI”random-looking name “H=3.88”
punycode name “硬质合金 scripts=CJK”random-looking name “H=3.64”
punycode name “페르소나노트 scripts=HANGUL”random-looking name “H=3.98”
punycode name “식물나라 scripts=HANGUL”random-looking name “H=3.77”
punycode name “천사나라 scripts=HANGUL”random-looking name “H=3.64”
punycode name “푸른나래 scripts=HANGUL”random-looking name “H=3.75”
punycode name “ฉ่ําว้าว scripts=THAI”random-looking name “H=3.62”
punycode name “聯誼國際 scripts=CJK”random-looking name “H=3.64”
punycode name “베스트회생파산 scripts=HANGUL”random-looking name “H=3.97”
punycode name “田城云发 scripts=CJK”random-looking name “H=3.64”
punycode name “云顶温泉大酒店 scripts=CJK”random-looking name “H=3.97”
punycode name “博盈集团 scripts=CJK”random-looking name “H=3.75”
Same data as JSON: /api/zone/risk?day=2026-09-11&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.