Flagged newborn domains, Tuesday, September 22, 2026
10,662 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “福建源古历史博物馆 scripts=CJK”very long name “30”random-looking name “H=4.24”
punycode name “힐스테이트동인더스카이 scripts=HANGUL”very long name “36”random-looking name “H=4.35”
punycode name “祁连山鹿文化生态旅游区 scripts=CJK”very long name “40”random-looking name “H=4.46”
punycode name “용인반도체부동산 scripts=HANGUL”very long name “29”random-looking name “H=3.88”
punycode name “千镇文旅与乡村振兴直播团队 scripts=CJK”very long name “43”random-looking name “H=4.55”
punycode name “청담더뷰티미용학원 scripts=HANGUL”very long name “32”random-looking name “H=4.32”
punycode name “휴대폰성지휴맛집성남점 scripts=HANGUL”very long name “37”random-looking name “H=4.32”
punycode name “潍坊领航交通设施 scripts=CJK”very long name “28”random-looking name “H=4.10”
punycode name “平顶山公共就业人才网 scripts=CJK”very long name “35”random-looking name “H=4.48”
punycode name “青海农业科技平台 scripts=CJK”very long name “29”random-looking name “H=4.06”
punycode name “青海农业科技平台 scripts=CJK”very long name “29”random-looking name “H=4.06”
punycode name “河北餐饮行业门户 scripts=CJK”very long name “29”random-looking name “H=4.13”
punycode name “中国酒水行业平台 scripts=CJK”very long name “29”random-looking name “H=4.24”
punycode name “위대한산후도우미 scripts=HANGUL”very long name “29”random-looking name “H=4.28”
punycode name “대한소비자협의회 scripts=HANGUL”very long name “29”random-looking name “H=4.21”
punycode name “대한소비자협의회 scripts=HANGUL”very long name “29”random-looking name “H=4.21”
punycode name “천안아이파크시티홈페이지 scripts=HANGUL”very long name “39”random-looking name “H=4.41”
punycode name “아낌없이주는나무 scripts=HANGUL”very long name “28”random-looking name “H=3.95”
punycode name “양산쌍용더플래티넘 scripts=HANGUL”very long name “33”random-looking name “H=4.20”
punycode name “广东耀粤建设工程有限公司 scripts=CJK”very long name “43”random-looking name “H=4.44”
lure words (login, verify, secure…) “access”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “access”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “alert”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “alert,alerts,service”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “official”brand in page title, not in the name “tiktok”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
many hyphens “3”brand in page title, not in the name “roblox”
lure words (login, verify, secure…) “track”brand in page title, not in the name “hostinger”
lure words (login, verify, secure…) “verification”very long name “34”TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “verification”very long name “28”TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
many hyphens “3”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service”brand in page title, not in the name “cloudflare”
very long name “28”page impersonates a brand “Binance”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “wallet”brand in page title, not in the name “phantom”
lure words (login, verify, secure…) “service”brand in page title, not in the name “whatsapp”
many hyphens “3”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “claim”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “reset”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “limited”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “login”brand in page title, not in the name “cloudflare”
punycode name “狂少 scripts=CJK”TLD with a high abuse rate “top”
punycode name “濁茶 scripts=CJK”TLD with a high abuse rate “top”
Same data as JSON: /api/zone/risk?day=2026-09-22&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.