Flagged newborn domains, Thursday, October 1, 2026
10,743 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
brand in the name “ebay”identical page on many newborns “520 identical pages”
very long name “28”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “service,services”very long name “34”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “service,services”very long name “31”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “service,services”very long name “31”TLD with a high abuse rate “xyz”
brand in the name “tmobile”very long name “28”brand name on a rarely-seen nameserver “namehero.com”
very long name “29”brand in page title, not in the name “cloudflare”
brand in the name “revolut”many hyphens “3”very long name “30”
brand in the name “tmobile”identical page on many newborns “4845 identical pages”
brand in the name “tmobile”identical page on many newborns “241 identical pages”
brand in the name “ionos”identical page on many newborns “107 identical pages”
brand in the name “intesa”identical page on many newborns “2918 identical pages”
brand in the name “intesa”identical page on many newborns “2918 identical pages”
lure words (login, verify, secure…) “login,portal,service”many hyphens “4”
lure words (login, verify, secure…) “login,portal,service”many hyphens “3”
lure words (login, verify, secure…) “help”many hyphens “4”very long name “29”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “help”many hyphens “4”very long name “29”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “gov,service,services”many hyphens “3”
brand in the name “revolut”very long name “38”brand name behind Cloudflare “cloudflare.com”
lure words (login, verify, secure…) “prize,prizes,win”many hyphens “3”
punycode name “отпушване-на-канали-велико-търново scrip”many hyphens “4”
punycode name “законное-решение-в-рф scripts=CYRILLIC”many hyphens “3”
punycode name “شراء-اثاث-مستعمل-الكويت scripts=ARABIC”many hyphens “3”
punycode name “cavalière-indé-flora-lafon scripts=LATIN”many hyphens “3”
punycode name “getofficíals scripts=LATIN”lure words (login, verify, secure…) “official”
punycode name “getofficíals scripts=LATIN”lure words (login, verify, secure…) “official”
punycode name “그섬에가고싶다 scripts=HANGUL”form submits over plain HTTP “http://xn--o39aqqg0ac8lhwuuoc65g.shop/”
punycode name “sykkelservicepådøra scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “แอโรบิกสมอง scripts=THAI”random-looking name “H=4.02”
punycode name “หวยนกยูงทอง scripts=THAI”random-looking name “H=3.75”
punycode name “北京同仁堂 scripts=CJK”random-looking name “H=3.88”
punycode name “北京同仁堂 scripts=CJK”random-looking name “H=3.88”
punycode name “北京同仁堂 scripts=CJK”random-looking name “H=3.88”
punycode name “เสาเข็มระยอง scripts=THAI”random-looking name “H=3.88”
punycode name “다이소알뜰폰 scripts=HANGUL”random-looking name “H=4.00”
punycode name “주소랭킹 scripts=HANGUL”random-looking name “H=3.64”
punycode name “동서익스프레스 scripts=HANGUL”random-looking name “H=4.11”
punycode name “서동탄역랜시티 scripts=HANGUL”random-looking name “H=4.08”
punycode name “서동탄랜시티 scripts=HANGUL”random-looking name “H=3.79”
punycode name “유일테크 scripts=HANGUL”random-looking name “H=3.81”
punycode name “메디테라카운티 scripts=HANGUL”random-looking name “H=4.25”
punycode name “소망복지센터 scripts=HANGUL”random-looking name “H=4.11”
punycode name “総合建築工事 scripts=CJK”random-looking name “H=4.01”
punycode name “회의실예약 scripts=HANGUL”random-looking name “H=3.79”
punycode name “เย็ดมั้ยคะ scripts=THAI”random-looking name “H=3.62”
punycode name “เย็ดหีควยแตด scripts=THAI”random-looking name “H=3.77”
punycode name “雄安旅游 scripts=CJK”random-looking name “H=3.91”
punycode name “一元域名 scripts=CJK”random-looking name “H=3.66”
punycode name “你猜一下 scripts=CJK”random-looking name “H=3.81”
punycode name “형제만호돌김 scripts=HANGUL”random-looking name “H=4.20”
Same data as JSON: /api/zone/risk?day=2026-10-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.