Flagged newborn domains, Friday, September 18, 2026
10,897 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
nameserver domain born the same day “tradivotgroup.com”
nameserver domain born the same day “ironwickai.com”
nameserver domain born the same day “autotrendlab.com”
nameserver domain born the same day “tryvetramilpro.com”
nameserver domain born the same day “twbmediagroup.com”
nameserver domain born the same day “ironwickai.com”
nameserver domain born the same day “ironwickai.com”
nameserver domain born the same day “ironwickai.com”
lure words (login, verify, secure…) “support”many hyphens “3”very long name “44”TLD with a high abuse rate “icu”
very long name “31”brand in page title, not in the name “namecheap”
brand in the name “wordpress”very long name “28”brand name on a rarely-seen nameserver “awsdns-17.org”
very long name “28”brand in page title, not in the name “whatsapp”
very long name “29”brand in page title, not in the name “cloudflare”
brand in the name “venmo”identical page on many newborns “4366 identical pages”
very long name “30”brand in page title, not in the name “nationwide”
lure words (login, verify, secure…) “auth,login,portal,service”many hyphens “3”
lure words (login, verify, secure…) “login,portal,service”many hyphens “4”
very long name “31”brand in page title, not in the name “nationwide”
brand in the name “revolut”identical page on many newborns “26 identical pages”
very long name “29”brand in page title, not in the name “vanguard”
very long name “28”brand in page title, not in the name “wordpress”
punycode name “일번수산 scripts=HANGUL”form submits over plain HTTP “http://xn--lk3b29e34axzl.com/”
punycode name “rsécure scripts=LATIN”lure words (login, verify, secure…) “secure”
many hyphens “8”very long name “47”random-looking name “H=3.78”TLD with a high abuse rate “click”
many hyphens “3”very long name “29”random-looking name “H=3.84”TLD with a high abuse rate “buzz”
punycode name “晚风故事书屋 scripts=CJK”random-looking name “H=3.98”
punycode name “长夜书海小说 scripts=CJK”random-looking name “H=3.82”
punycode name “北京胡同 scripts=CJK”random-looking name “H=3.91”
punycode name “北京胡同 scripts=CJK”random-looking name “H=3.91”
punycode name “다연콘텐츠 scripts=HANGUL”random-looking name “H=3.83”
punycode name “바다여행 scripts=HANGUL”random-looking name “H=3.64”
punycode name “반하다코리아 scripts=HANGUL”random-looking name “H=3.82”
punycode name “벳통령주소 scripts=HANGUL”random-looking name “H=3.73”
punycode name “영등포알뜰폰 scripts=HANGUL”random-looking name “H=3.82”
punycode name “익산스웨디시 scripts=HANGUL”random-looking name “H=3.88”
punycode name “스튜디오디 scripts=HANGUL”random-looking name “H=3.85”
punycode name “枕星文学在线 scripts=CJK”random-looking name “H=3.78”
punycode name “หีคนสวย scripts=THAI”random-looking name “H=3.66”
punycode name “武汉公开赛 scripts=CJK”random-looking name “H=3.83”
punycode name “เป๋าตังพลัส scripts=THAI”random-looking name “H=3.88”
punycode name “เสียวทางบ้าน scripts=THAI”random-looking name “H=3.91”
punycode name “甘肃高原夏菜 scripts=CJK”random-looking name “H=4.28”
punycode name “나움디자인 scripts=HANGUL”random-looking name “H=3.85”
punycode name “兰州高原夏菜 scripts=CJK”random-looking name “H=4.06”
punycode name “雅藝國際 scripts=CJK”random-looking name “H=3.66”
punycode name “雅藝國際 scripts=CJK”random-looking name “H=3.66”
punycode name “雅藝國際 scripts=CJK”random-looking name “H=3.66”
punycode name “雅藝國際 scripts=CJK”random-looking name “H=3.66”
punycode name “초이평생주소 scripts=HANGUL”random-looking name “H=4.02”
punycode name “云天国际 scripts=CJK”random-looking name “H=3.77”
Same data as JSON: /api/zone/risk?day=2026-09-18&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.