Flagged newborn domains, Monday, September 21, 2026
15,107 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “מעסלעבודותצבעושיפוצים scripts=HEBREW”very long name “32”
punycode name “두산위브더제니스팔라티움 scripts=HANGUL”very long name “40”
punycode name “acompañamientoterapeuticocolombia script”very long name “33”
punycode name “associaçãooficialdacomunidadeperegrina s”very long name “38”
punycode name “세한욕실리모델링 scripts=HANGUL”very long name “29”
punycode name “陕西医疗器械平台 scripts=CJK”very long name “28”
punycode name “陕西医疗器械平台 scripts=CJK”very long name “28”
punycode name “evoluciónytransformaciónparatufuturo scr”very long name “36”
punycode name “中医骨科词元实验室 scripts=CJK”very long name “33”
punycode name “中国人工智能模型 scripts=CJK”very long name “28”
punycode name “中国人工智能集团 scripts=CJK”very long name “29”
punycode name “有巢氏房屋藝文中正加盟店 scripts=CJK”very long name “42”
punycode name “中国全球低空经济网 scripts=CJK”very long name “32”
punycode name “中国全球数字资产 scripts=CJK”very long name “28”
punycode name “中國儀器儀表供應鏈 scripts=CJK”very long name “33”
punycode name “深圳市银湖旅游中心 scripts=CJK”very long name “32”
punycode name “中国仪器仪表供应链 scripts=CJK”very long name “31”
punycode name “陶丰英陶氏分筋正骨 scripts=CJK”very long name “34”
punycode name “kotela-szkołarysunkuimalarstwa scripts=L”very long name “29”
punycode name “센텀자이리버노블 scripts=HANGUL”very long name “29”
punycode name “카지노무현평생주소 scripts=HANGUL”very long name “33”
punycode name “힐스테이트푸르지오사하역포레스트 scripts=HANGUL”very long name “51”
punycode name “深圳市创锐实业有限公司 scripts=CJK”very long name “37”
page impersonates a brand “Apple ID”
page impersonates a brand “Netflix”
page impersonates a brand “Paypal”
TLD with a high abuse rate “cfd”login form “has_form+login words”
brand in the name “amazon”brand name on a rarely-seen nameserver “awsdns-08.org”brand's own DNS (reduces score) “ns-1092.awsdns-08.org”
random-looking name “H=4.00”TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
brand in page title, not in the name “robinhood”
brand in page title, not in the name “robinhood”
brand in page title, not in the name “spotify”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “telegram”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
brand in page title, not in the name “chatgpt”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “instagram”
Same data as JSON: /api/zone/risk?day=2026-09-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.