Flagged newborn domains, Tuesday, September 22, 2026
10,662 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “PayPal”
TLD with a high abuse rate “xyz”login form “has_form+login words”
page impersonates a brand “Binance”
page impersonates a brand “Binance”
punycode name “ระบบบริหารสํานักงานกฎหมาย scripts=THAI”very long name “40”
punycode name “평택고덕우미린더프리미어 scripts=HANGUL”very long name “42”
punycode name “힐스테이트구미더퍼스트 scripts=HANGUL”very long name “37”
punycode name “오송역헬로우시티 scripts=HANGUL”very long name “29”
punycode name “สินค้าหลุดจํานํา scripts=THAI”very long name “29”
punycode name “anestesiologiaygestiónensalud scripts=LA”very long name “29”
punycode name “asociacionculturalespañolacn scripts=LAT”very long name “28”
punycode name “asociacionculturalespañolacn scripts=LAT”very long name “28”
punycode name “asociacionculturalespañolacn scripts=LAT”very long name “28”
punycode name “asociacionculturalespañolacn scripts=LAT”very long name “28”
punycode name “오산헤리티지자이모델하우스 scripts=HANGUL”very long name “44”
punycode name “centroderehabilitacióngranjalaesperanza ”very long name “39”
punycode name “escuelasuperiorrediseñohumano scripts=LA”very long name “29”
punycode name “瓦房店市中心医院 scripts=CJK”very long name “30”
punycode name “中国仪器仪表供应链 scripts=CJK”very long name “31”
punycode name “하늘부동산공인중개사 scripts=HANGUL”very long name “35”
punycode name “مطعموهجللأكلاتالشعبية scripts=ARABIC”very long name “32”
punycode name “裕固族民俗度假区 scripts=CJK”very long name “28”
punycode name “lustreyrestauraciónenmendoza scripts=LAT”very long name “28”
punycode name “행사연예인가수섭외 scripts=HANGUL”very long name “33”
punycode name “공도장례식장영화원 scripts=HANGUL”very long name “33”
punycode name “阿柯soeayguangdongguangzhoufffggg scripts=”very long name “29”
punycode name “utländskacasinolåginsättning scripts=LAT”very long name “28”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “PAYPAL”
page impersonates a brand “PayPal”
page impersonates a brand “Microsoft 365”
page impersonates a brand “Microsoft 365”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “adobe”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “godaddy”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “roblox”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-09-22&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.