Flagged newborn domains, Thursday, September 17, 2026
11,750 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “锦牧阁养殖 scripts=CJK”random-looking name “H=3.93”
punycode name “资阳养殖平台 scripts=CJK”random-looking name “H=3.78”
punycode name “资阳养殖平台 scripts=CJK”random-looking name “H=3.78”
punycode name “이레트랜스 scripts=HANGUL”random-looking name “H=3.73”
punycode name “만화의추억 scripts=HANGUL”random-looking name “H=3.95”
punycode name “浏览器打开 scripts=CJK”random-looking name “H=3.84”
punycode name “루돌프평생주소 scripts=HANGUL”random-looking name “H=4.00”
punycode name “루돌프주소 scripts=HANGUL”random-looking name “H=3.84”
punycode name “클릭사이트 scripts=HANGUL”random-looking name “H=3.79”
punycode name “충남뉴스통신 scripts=HANGUL”random-looking name “H=4.23”
punycode name “華為乾崑智駕 scripts=CJK”random-looking name “H=3.91”
punycode name “桥点无界 scripts=CJK”random-looking name “H=3.81”
punycode name “世界人工智能网 scripts=CJK”random-looking name “H=4.14”
punycode name “轩龙智能装备 scripts=CJK”random-looking name “H=3.98”
punycode name “轩龙智能装备 scripts=CJK”random-looking name “H=3.98”
punycode name “왕벳주소 scripts=HANGUL”random-looking name “H=3.91”
punycode name “투윈벳주소 scripts=HANGUL”random-looking name “H=3.73”
punycode name “全球交易网 scripts=CJK”random-looking name “H=3.95”
punycode name “游戏交流 scripts=CJK”random-looking name “H=3.91”
punycode name “이안법무사사무소 scripts=HANGUL”random-looking name “H=3.83”
punycode name “명동피부과추천 scripts=HANGUL”random-looking name “H=4.13”
punycode name “수정구정형외과 scripts=HANGUL”random-looking name “H=3.85”
punycode name “供热产业园 scripts=CJK”random-looking name “H=4.00”
punycode name “雅润农业 scripts=CJK”random-looking name “H=3.88”
punycode name “电商创业网 scripts=CJK”random-looking name “H=3.84”
punycode name “工业太阳能 scripts=CJK”random-looking name “H=3.95”
punycode name “今艺陶瓷业 scripts=CJK”random-looking name “H=3.73”
punycode name “工业中台 scripts=CJK”random-looking name “H=3.81”
punycode name “北京企业咨询 scripts=CJK”random-looking name “H=3.79”
punycode name “业主大会网 scripts=CJK”random-looking name “H=3.73”
punycode name “대상웰라움순창 scripts=HANGUL”random-looking name “H=4.08”
punycode name “해운대호빠 scripts=HANGUL”random-looking name “H=4.06”
punycode name “대한탐정 scripts=HANGUL”random-looking name “H=3.62”
punycode name “浩友房地产 scripts=CJK”random-looking name “H=3.73”
punycode name “回家链接 scripts=CJK”random-looking name “H=3.91”
punycode name “问鼎官方回收 scripts=CJK”random-looking name “H=4.30”
punycode name “침산탑요양원 scripts=HANGUL”random-looking name “H=3.84”
punycode name “울산탐정 scripts=HANGUL”random-looking name “H=3.77”
punycode name “益阳周玉通讯 scripts=CJK”random-looking name “H=4.00”
TLD with a high abuse rate “click”login form “has_form+login words”
many hyphens “3”TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
page impersonates a brand “Microsoft 365”
TLD with a high abuse rate “xyz”login form “has_form+login words”
free DNS provider “dnsowl.com”login form “has_form+login words”
page impersonates a brand “COINBASE”
TLD with a high abuse rate “xyz”login form “has_form+login words”
page impersonates a brand “PayPal”
TLD with a high abuse rate “xyz”login form “has_form+login words”
TLD with a high abuse rate “xyz”page pushes urgent payment “act Now”
page impersonates a brand “PayPal”
Same data as JSON: /api/zone/risk?day=2026-09-17&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.