Flagged newborn domains, Thursday, September 17, 2026

11,750 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowtsukistreaming.shopscore 22· active website
page impersonates a brandBinance
Lowtuinmaster.shopscore 22· active website
page impersonates a brandPayPal
Lowtutiendayapa.comscore 22· active website
page impersonates a brandNetflix
Lowunlimitedvideo.topscore 22· no web server
lure words (login, verify, secure…)limitedTLD with a high abuse ratetopfree DNS providerdnsowl.com
Lowuseearn.appscore 22· active website
page impersonates a brandBinance
Lowvan-haber.comscore 22· active website
page impersonates a brandNetflix
Lowvegas-vanguards.xyzscore 22echoes vanguard· excluded
brand in the namevanguardTLD with a high abuse ratexyz
Lowvegasvanguardsgear.xyzscore 22echoes vanguard· excluded
brand in the namevanguardTLD with a high abuse ratexyz
Lowvegasvanguardsstore.xyzscore 22echoes vanguard· excluded
brand in the namevanguardTLD with a high abuse ratexyz
Lowvgsvanguards.xyzscore 22echoes vanguard· excluded
brand in the namevanguardTLD with a high abuse ratexyz
Lowvipindxl.xyzscore 22· redirects elsewhere
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowvolna.cashscore 22· active website
page impersonates a brandBinance
Lowvpnpower.orgscore 22· active website
page impersonates a brandNetflix
Lowwahaj.artscore 22· active website
page impersonates a brandNetflix
Lowwellzit.supportscore 22· active website
page impersonates a brandMicrosoft 365
Lowwiofood.comscore 22· active website
page impersonates a brandPayPal
Lowwjpiy4awjqe3v.xyzscore 22· active website
TLD with a high abuse ratexyzlogin formhas_form+login words
Lowwsos.livescore 22· active website
page impersonates a brandCoinbase
punycode name국민참여고용서비스발굴온라인해커톤 scripts=HANGULvery long name55
punycode name고양시출장마사지 scripts=HANGULvery long name29
punycode name구리시출장마사지 scripts=HANGULvery long name29
punycode nameคลิปหลุดดดูฟรี scripts=THAIvery long name28
punycode name대한근로복지협회 scripts=HANGULvery long name29
punycode name株式会社優栄建設 scripts=CJKvery long name30
punycode nameรวมรถมือสองอันดามัน scripts=THAIvery long name32
punycode nameหลอมทองวงเวียนใหญ่ scripts=THAIvery long name31
punycode nameหนังเอวีซับไทยย scripts=THAIvery long name29
punycode nameрактыдарылоотуркияда scripts=CYRILLICvery long name29
punycode nameлечениеракавтурции scripts=CYRILLICvery long name28
Lowxn--9i1b3bwwtnh3qwtdvtgtshkplhnby0ii95c.shopscore 22· boilerplate page
punycode name롯데인피니엘다모아부동산 scripts=HANGULvery long name39
punycode name智电之源智慧储能 scripts=CJKvery long name28
punycode name검단센트레빌그랑포레모델하우스 scripts=HANGULvery long name50
Lowxn--descuento-empleadosluz-campaa2026-ufd.onlinescore 22· redirect not followed
punycode namedescuento-empleadosluz-campaña2026 scripvery long name34
punycode name紫昙朱家藤桥排骨 scripts=CJKvery long name30
punycode name紫飨朱家藤桥排骨 scripts=CJKvery long name30
punycode name上海建筑设计研究院 scripts=CJKvery long name34
punycode name中國藝術品交易網 scripts=CJKvery long name29
punycode name中国艺术品交易网 scripts=CJKvery long name29
punycode name中国淡水鱼电商平台 scripts=CJKvery long name32
punycode name中国装饰联盟网 scripts=CJKvery long name28
punycode namelavajálimpezadeestofadosehigienização scvery long name37
punycode namelc79giảitríđỉnhcao-trảinghiệmkhácbiệt scvery long name36
punycode name마음길아동가족상담센터 scripts=HANGULvery long name39
punycode name송도대광로제비앙모아엘가 scripts=HANGULvery long name39
punycode nameorthopädische-schmerztherapie-osnabrück very long name39
punycode name新疆劳务工程信息平台 scripts=CJKvery long name35
punycode name新疆劳务工程信息平台 scripts=CJKvery long name35
punycode namezonededéveloppementdesjeunes scripts=LATvery long name28
Lowxrocket.lolscore 22· active website
TLD with a high abuse ratelolpage pushes urgent paymentact now
lure words (login, verify, secure…)service,servicesmany hyphens5very long name32

Same data as JSON: /api/zone/risk?day=2026-09-17&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.