Flagged newborn domains, Friday, September 18, 2026
10,897 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “Netflix”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
lure words (login, verify, secure…) “service,services,winner”very long name “28”
brand in the name “itau”brand plus digits “winspirit-au22”
page impersonates a brand “Netflix”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
many hyphens “3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
punycode name “บริษัทกําจัดปลวกกทม scripts=THAI”very long name “34”
punycode name “รับกําจัดปลวกสมุทรปราการ scripts=THAI”very long name “39”
punycode name “เวชภัณฑ์การแพทย์ราคาถูก scripts=THAI”very long name “39”
punycode name “บริษัทกําจัดปลวกนนทบุรี scripts=THAI”very long name “38”
punycode name “รับฉีดปลวกใกล้ฉัน scripts=THAI”very long name “31”
punycode name “เว็บหวยก้าวเจริญ scripts=THAI”very long name “30”
punycode name “경기광주효성해링턴 scripts=HANGUL”very long name “32”
punycode name “태경데스크탑다운로드 scripts=HANGUL”very long name “33”
punycode name “태경모바일다운로드 scripts=HANGUL”very long name “34”
punycode name “신경외과전문의이지욱 scripts=HANGUL”very long name “33”
punycode name “고려신용정보넘버원 scripts=HANGUL”very long name “31”
punycode name “고망고충주용산점 scripts=HANGUL”very long name “28”
punycode name “씨엘스톤더써밋구로구청 scripts=HANGUL”very long name “38”
punycode name “구매안전이용서비스확인증 scripts=HANGUL”very long name “41”
punycode name “앤텔레콤감프로통신 scripts=HANGUL”very long name “32”
punycode name “ล้างแผงโซล่าเซลล์ scripts=THAI”very long name “29”
punycode name “강북미아성형외과 scripts=HANGUL”very long name “30”
punycode name “ᴘᴜʙʟɪᴄɪꜱꜱᴀᴘɪᴇɴᴛ scripts=LATIN”very long name “37”
punycode name “中國環保行業門戶 scripts=CJK”very long name “29”
punycode name “호두코믹스최신주소 scripts=HANGUL”very long name “32”
punycode name “kecıorenbaymakdemirdokumteknik scripts=L”very long name “29”
punycode name “négociationassuranceemprunteurimmobilier”very long name “40”
punycode name “négociationetrenégociationassuranceempru”very long name “55”
punycode name “야동닷컴바로가기 scripts=HANGUL”very long name “29”
punycode name “효담재가복지센터 scripts=HANGUL”very long name “29”
punycode name “공장등록지원센터 scripts=HANGUL”very long name “29”
punycode name “카시아속초호텔앤리조트 scripts=HANGUL”very long name “37”
punycode name “revıew-apple scripts=LATIN”ambiguous brand word “apple”
lure words (login, verify, secure…) “service,services”many hyphens “5”very long name “32”
page impersonates a brand “PayPal”
brand in the name “revolut”TLD with a high abuse rate “xyz”
random-looking name “H=3.88”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Same data as JSON: /api/zone/risk?day=2026-09-18&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.