Flagged newborn domains, Friday, September 11, 2026
10,818 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “USPS”
page impersonates a brand “Binance”
lure words (login, verify, secure…) “login”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
page impersonates a brand “Paypal”
TLD with a high abuse rate “top”login form “has_form+login words”
lure words (login, verify, secure…) “service,services,support”very long name “33”
brand in the name “revolut”TLD with a high abuse rate “xyz”
page impersonates a brand “Binance”
TLD with a high abuse rate “xyz”login form “has_form+login words”
TLD with a high abuse rate “work”login form “has_form+login words”
page impersonates a brand “Coinbase”
punycode name “กระทุ่มแบนไปด้วยกัน scripts=THAI”very long name “35”
punycode name “ระบบบริหารงานที่ปรึกษากฎหมาย scripts=THA”very long name “46”
punycode name “ผลสลากกินแบ่งรัฐบาล scripts=THAI”very long name “33”
punycode name “구미파크원데시앙 scripts=HANGUL”very long name “30”
punycode name “오아시스음주구제 scripts=HANGUL”very long name “29”
punycode name “전국오토바이매입 scripts=HANGUL”very long name “29”
punycode name “เว็บแทงหวยออนไลน์จ่ายจริง scripts=THAI”very long name “43”
punycode name “bayraktarlarmersamercedesbenzaş scripts=”very long name “31”
punycode name “북오산자이드포레모델하우스 scripts=HANGUL”very long name “44”
punycode name “東洋医学指圧鍼灸院 scripts=CJK”very long name “32”
punycode name “赣州柒龙威固膜授权中心 scripts=CJK”very long name “40”
punycode name “losguardasdelparaísoporelmundo scripts=L”very long name “30”
punycode name “만복재가방문요양센터 scripts=HANGUL”very long name “36”
punycode name “천왕역모아엘가모델하우스 scripts=HANGUL”very long name “41”
punycode name “분양정보확인하기 scripts=HANGUL”very long name “30”
punycode name “remodelacionportillosconstrucción script”very long name “33”
punycode name “에이원노인주간보호센터 scripts=HANGUL”very long name “39”
punycode name “동해주간보호센터 scripts=HANGUL”very long name “29”
punycode name “형사사건전문변호사 scripts=HANGUL”very long name “30”
page impersonates a brand “Coinbase”
page impersonates a brand “Paypal”
TLD with a high abuse rate “xyz”login form “has_form+login words”
page impersonates a brand “IRS”
TLD with a high abuse rate “xyz”login form “has_form+login words”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “facebook”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “roblox”
brand in page title, not in the name “medicare”
brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “xyz”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-09-11&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.