Flagged newborn domains, Friday, September 18, 2026
10,897 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
many hyphens “4”very long name “28”TLD with a high abuse rate “skin”
many hyphens “5”very long name “32”TLD with a high abuse rate “homes”
ambiguous brand word “spectrum”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
lure words (login, verify, secure…) “help,locked”many hyphens “4”
lure words (login, verify, secure…) “recover,recovery,service”
lure words (login, verify, secure…) “security,service,services”
brand in the name “telegram”TLD with a high abuse rate “work”
many hyphens “3”very long name “28”TLD with a high abuse rate “sbs”
many hyphens “3”very long name “28”TLD with a high abuse rate “sbs”
many hyphens “5”very long name “37”TLD with a high abuse rate “homes”
many hyphens “4”very long name “32”TLD with a high abuse rate “autos”
many hyphens “3”very long name “28”TLD with a high abuse rate “cfd”
many hyphens “4”very long name “34”TLD with a high abuse rate “mom”
many hyphens “3”very long name “38”TLD with a high abuse rate “hair”
lure words (login, verify, secure…) “refund,refunds,service,services”
many hyphens “3”very long name “34”TLD with a high abuse rate “cfd”
many hyphens “5”very long name “31”TLD with a high abuse rate “hair”
lure words (login, verify, secure…) “customer,customers,service”
punycode name “חרטט-אותי scripts=HEBREW”
punycode name “شیک-طب scripts=ARABIC”
punycode name “강서가라오케-강서노래방 scripts=HANGUL”
punycode name “강동가라오케-강동노래방 scripts=HANGUL”
punycode name “관악가라오케-관악노래방 scripts=HANGUL”
punycode name “금천가라오케-금천노래방 scripts=HANGUL”
punycode name “송파가라오케-송파노래방 scripts=HANGUL”
punycode name “서초가라오케-서초노래방 scripts=HANGUL”
punycode name “양천가라오케-양천노래방 scripts=HANGUL”
punycode name “마포가라오케-마포노래방 scripts=HANGUL”
punycode name “명동가라오케-명동노래방 scripts=HANGUL”
punycode name “동작가라오케-동작노래방 scripts=HANGUL”
punycode name “наш-город scripts=CYRILLIC”
punycode name “データベース0001 scripts=KATAKANA/KATAKANA-HIR”
punycode name “和黎 scripts=CJK”
punycode name “오토바이매입1 scripts=HANGUL”
punycode name “간병1 scripts=HANGUL”
punycode name “แจก100 scripts=THAI”
punycode name “แจก100 scripts=THAI”
punycode name “개발분석114 scripts=HANGUL”
punycode name “최강링크12 scripts=HANGUL”
punycode name “120casíbom scripts=LATIN”
punycode name “120casỉbom scripts=LATIN”
punycode name “121casìbom scripts=LATIN”
punycode name “121casíbom scripts=LATIN”
punycode name “ดูบอลสด123 scripts=THAI”
punycode name “สล็อต123 scripts=THAI”
punycode name “สล็อต123 scripts=THAI”
punycode name “สล็อต123 scripts=THAI”
punycode name “หลุดเกาหลี scripts=THAI”
punycode name “มักเย็ด scripts=THAI”
punycode name “แตกใน scripts=THAI”
Same data as JSON: /api/zone/risk?day=2026-09-18&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.