Flagged newborn domains, Friday, September 25, 2026
2,816 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “หนังโป๊ใหม่สุด scripts=THAI”very long name “28”random-looking name “H=3.69”
punycode name “南安市秋屿互联网游戏服务工作室 scripts=CJK”very long name “49”random-looking name “H=4.25”
punycode name “超级喜欢做客新浪财经可能小姐参考资料 scripts=CJK”very long name “61”random-looking name “H=4.65”
punycode name “新加坡寂寞男人网 scripts=CJK”very long name “28”random-looking name “H=4.01”
punycode name “撒大家啊山莨菪碱阿达鸡撒 scripts=CJK”very long name “43”random-looking name “H=4.34”
punycode name “阿萨德立卡时间段拉数据大萨达 scripts=CJK”very long name “49”random-looking name “H=4.28”
punycode name “ระบบบริหารร้านมือถือ scripts=THAI”very long name “35”random-looking name “H=3.63”
punycode name “北京京乾律师事务所 scripts=CJK”very long name “29”random-looking name “H=4.13”
punycode name “원엑스벳평생주소 scripts=HANGUL”very long name “29”random-looking name “H=4.24”
punycode name “해운대라센트스위첸 scripts=HANGUL”very long name “33”random-looking name “H=4.11”
punycode name “순천조례현대아이파크홈페이지 scripts=HANGUL”very long name “45”random-looking name “H=4.46”
punycode name “就在形成机制空闲进程可怜见看来自行车 scripts=CJK”very long name “62”random-looking name “H=4.53”
punycode name “德阳汽车服务平台 scripts=CJK”very long name “29”random-looking name “H=4.61”
punycode name “德阳汽车服务平台 scripts=CJK”very long name “29”random-looking name “H=4.61”
lure words (login, verify, secure…) “winner”brand in page title, not in the name “amazon”
lure words (login, verify, secure…) “access”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “limited”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “account”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “member”brand in page title, not in the name “wordpress”
many hyphens “3”brand in page title, not in the name “roblox”
many hyphens “3”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service”brand in page title, not in the name “telegram”
lure words (login, verify, secure…) “recover,recovery,wallet”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “reset”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “package”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “pay”brand in page title, not in the name “cloudflare”
many hyphens “3”brand in page title, not in the name “booking”
lure words (login, verify, secure…) “service”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “service”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “track”brand in page title, not in the name “gmail”
lure words (login, verify, secure…) “official”brand in page title, not in the name “google”
lure words (login, verify, secure…) “service”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “payment,payments”many hyphens “3”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “payment”brand in page title, not in the name “godaddy”
lure words (login, verify, secure…) “access,recover,recovery”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “recover,recovery,refund,secure”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “login”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “login”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”login form “has_form+login words”
lure words (login, verify, secure…) “support”brand in page title, not in the name “microsoft”
lure words (login, verify, secure…) “account”brand in page title, not in the name “ledger”
lure words (login, verify, secure…) “verification”brand in page title, not in the name “coinbase”
many hyphens “3”brand in page title, not in the name “cloudflare”
punycode name “001集团 scripts=CJK”TLD with a high abuse rate “top”
punycode name “001集團 scripts=CJK”TLD with a high abuse rate “top”
punycode name “淺 scripts=CJK”TLD with a high abuse rate “top”
punycode name “早 scripts=CJK”TLD with a high abuse rate “top”
punycode name “執子 scripts=CJK”TLD with a high abuse rate “top”
Same data as JSON: /api/zone/risk?day=2026-09-25&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.