Flagged newborn domains, Sunday, September 13, 2026
7,316 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
brand in the name “shopee”identical page on many newborns “3088 identical pages”
brand in the name “etsy”identical page on many newborns “3088 identical pages”
brand in the name “microsoft”very long name “28”brand name behind Cloudflare “cloudflare.com”
very long name “28”brand in page title, not in the name “google”
lure words (login, verify, secure…) “service”many hyphens “4”very long name “41”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services”very long name “37”TLD with a high abuse rate “lol”
very long name “29”brand in page title, not in the name “roblox”
very long name “28”brand in page title, not in the name “booking”
brand in the name “shopify”identical page on many newborns “2718 identical pages”
lure words (login, verify, secure…) “confirm,validation”very long name “42”TLD with a high abuse rate “top”
punycode name “부산-해운대-고구려-룸살릉 scripts=HANGUL”many hyphens “3”
punycode name “bonita-mía scripts=LATIN”form submits over plain HTTP “http://xn--bonita-ma-n5a.com/”
punycode name “bonita-mía scripts=LATIN”form submits over plain HTTP “http://xn--bonita-ma-n5a.online/”
punycode name “bîtrefill-pay scripts=LATIN”lure words (login, verify, secure…) “pay”
punycode name “苹果id客服 scripts=CJK/LATIN”lure words (login, verify, secure…) “id”
punycode name “js-rénov-habitat-drôme scripts=LATIN”many hyphens “3”
punycode name “js-rénov-habitat-paca scripts=LATIN”many hyphens “3”
punycode name “全球土木工程 scripts=CJK”random-looking name “H=3.78”
punycode name “京工电科 scripts=CJK”random-looking name “H=3.77”
punycode name “동탄역디에트르 scripts=HANGUL”random-looking name “H=4.06”
punycode name “부동산실록 scripts=HANGUL”random-looking name “H=3.84”
punycode name “善筑百越 scripts=CJK”random-looking name “H=3.64”
punycode name “คลิปเย็ดสด scripts=THAI”random-looking name “H=3.69”
punycode name “ไมโครไพล์ scripts=THAI”random-looking name “H=3.73”
punycode name “江西艺术学院 scripts=CJK”random-looking name “H=4.01”
punycode name “福建工程学院 scripts=CJK”random-looking name “H=3.85”
punycode name “江西电影学校 scripts=CJK”random-looking name “H=4.07”
punycode name “西安宝石学校 scripts=CJK”random-looking name “H=3.72”
punycode name “利川一实小 scripts=CJK”random-looking name “H=3.85”
punycode name “第一次網 scripts=CJK”random-looking name “H=3.64”
punycode name “湘雅二医院 scripts=CJK”random-looking name “H=4.14”
punycode name “泉州提线木偶戏 scripts=CJK”random-looking name “H=3.97”
punycode name “深圳公证网 scripts=CJK”random-looking name “H=3.69”
punycode name “六祖故里 scripts=CJK”random-looking name “H=3.77”
punycode name “黔南物流 scripts=CJK”random-looking name “H=3.62”
punycode name “温州质检院 scripts=CJK”random-looking name “H=3.95”
punycode name “泉州旅游网 scripts=CJK”random-looking name “H=3.73”
punycode name “เป๋าตุง scripts=THAI”random-looking name “H=3.75”
punycode name “งานรัฐวันนี้ scripts=THAI”random-looking name “H=3.88”
punycode name “智绘文脉 scripts=CJK”random-looking name “H=3.81”
punycode name “贸易金融 scripts=CJK”random-looking name “H=3.77”
punycode name “深港桥头堡 scripts=CJK”random-looking name “H=3.75”
punycode name “우리동네맛집 scripts=HANGUL”random-looking name “H=4.01”
punycode name “贺兰山岩画 scripts=CJK”random-looking name “H=3.79”
punycode name “云南外国语学校 scripts=CJK”random-looking name “H=4.05”
punycode name “云采购权益 scripts=CJK”random-looking name “H=3.95”
punycode name “더받아드림 scripts=HANGUL”random-looking name “H=3.84”
punycode name “울산우정더폴 scripts=HANGUL”random-looking name “H=3.88”
punycode name “창원한신더휴 scripts=HANGUL”random-looking name “H=3.88”
punycode name “더샾천안라크원 scripts=HANGUL”random-looking name “H=4.22”
Same data as JSON: /api/zone/risk?day=2026-09-13&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.