Flagged newborn domains, Saturday, September 19, 2026
2,624 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “힐스테이트사직더프리즘 scripts=HANGUL”very long name “38”random-looking name “H=4.52”
punycode name “행정사안중덕사무소 scripts=HANGUL”very long name “32”random-looking name “H=4.15”
punycode name “ቢኤምደብሊውሰባትሰባትሰባት scripts=ETHIOPIC”very long name “32”random-looking name “H=3.81”
punycode name “مفروشاتنورتفصيلستائر scripts=ARABIC”very long name “31”random-looking name “H=3.75”
punycode name “深圳华佳管理咨询有限公司 scripts=CJK”very long name “42”random-looking name “H=4.24”
punycode name “힐스테이트오션스카이 scripts=HANGUL”very long name “34”random-looking name “H=4.18”
punycode name “영진햇살어린이집 scripts=HANGUL”very long name “28”random-looking name “H=4.18”
punycode name “스마트해법플러스신안점 scripts=HANGUL”very long name “38”random-looking name “H=4.18”
punycode name “라끄벨르백운호수 scripts=HANGUL”very long name “30”random-looking name “H=4.11”
punycode name “阿萨德贾丽娜山东墨龙哭唧 scripts=CJK”very long name “40”random-looking name “H=4.46”
punycode name “投了撒打算打开皮套就阿萨达 scripts=CJK”very long name “43”random-looking name “H=4.60”
punycode name “特价款拉萨到那时打了卡手打 scripts=CJK”very long name “42”random-looking name “H=4.40”
punycode name “돼한민국국밥부장관 scripts=HANGUL”very long name “32”random-looking name “H=3.95”
punycode name “대치동관리형독서실 scripts=HANGUL”very long name “33”random-looking name “H=4.24”
lure words (login, verify, secure…) “refund”brand in page title, not in the name “nationwide”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “customer,customers,support”TLD with a high abuse rate “sbs”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
many hyphens “3”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
many hyphens “3”brand in page title, not in the name “roblox”
lure words (login, verify, secure…) “service,services”page pushes urgent payment “act now”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”page pushes urgent payment “act Now”
lure words (login, verify, secure…) “delivery,service,services”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “winner”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “gov”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “reward,rewards”page pushes urgent payment “claim your prize”
lure words (login, verify, secure…) “login”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “service”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “limited”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “prize”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “update”brand in page title, not in the name “cloudflare”
many hyphens “3”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “pay”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “access”brand in page title, not in the name “tiktok”
lure words (login, verify, secure…) “limited”brand in page title, not in the name “cloudflare”
many hyphens “3”brand in page title, not in the name “roblox”
lure words (login, verify, secure…) “service”brand in page title, not in the name “chatgpt”
lure words (login, verify, secure…) “access”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “refund”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “support”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “tax”brand in page title, not in the name “medicare”
lure words (login, verify, secure…) “taxes,track,tracking”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “delivery”brand in page title, not in the name “facebook”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “customer,customers,service”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “claim”brand in page title, not in the name “uniswap”
Same data as JSON: /api/zone/risk?day=2026-09-19&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.