Flagged newborn domains, Thursday, October 1, 2026
10,743 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “DHL”
page impersonates a brand “Microsoft 365”
page impersonates a brand “Netflix”
page impersonates a brand “Netflix”
brand in the name “slack”TLD with a high abuse rate “cfd”
lure words (login, verify, secure…) “update”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”
page impersonates a brand “PayPal”
page impersonates a brand “Binance”
page impersonates a brand “DHL”
page impersonates a brand “DHL”
TLD with a high abuse rate “click”login form “has_form+login words”
page impersonates a brand “MetaMask”
page impersonates a brand “MetaMask”
page impersonates a brand “MetaMask”
TLD with a high abuse rate “xyz”login form “has_form+login words”
page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”login form “has_form+login words”
punycode name “ช่างกิจบริการสูบส้วม scripts=THAI”very long name “35”
punycode name “ศูนย์ข่าวทานตะวัน scripts=THAI”very long name “30”
punycode name “한영전기재고관리 scripts=HANGUL”very long name “29”
punycode name “대구달서푸르지오 scripts=HANGUL”very long name “29”
punycode name “오송역헬로우시티 scripts=HANGUL”very long name “29”
punycode name “앤텔레콤감프로선불폰 scripts=HANGUL”very long name “34”
punycode name “청주공항반값주차대행 scripts=HANGUL”very long name “35”
punycode name “ช่างอ้วนรางน้ําฝนเชียงราย scripts=THAI”very long name “42”
punycode name “한강푸르지오리버프론트 scripts=HANGUL”very long name “37”
punycode name “사랑샘방문요양센터 scripts=HANGUL”very long name “31”
punycode name “certificacióninternacionalach scripts=LA”very long name “29”
punycode name “中国食用菌供应商 scripts=CJK”very long name “30”
punycode name “لتبريدوالتكييفاحمد scripts=ARABIC”very long name “28”
punycode name “miniekskavatörhizmetlerihafriyat scripts”very long name “32”
punycode name “툰코주소바로가기 scripts=HANGUL”very long name “29”
punycode name “화원중진로가최고다 scripts=HANGUL”very long name “31”
punycode name “노아노인복지센터 scripts=HANGUL”very long name “28”
punycode name “대학성공면접인터뷰 scripts=HANGUL”very long name “33”
punycode name “중앙공원롯데캐슬홈페이지 scripts=HANGUL”very long name “41”
punycode name “observatorioseguridadalimentariaespaña s”very long name “38”
punycode name “observatorioseguridadalimentariaespaña s”very long name “38”
punycode name “기흥역쌍용더플래티넘 scripts=HANGUL”very long name “36”
punycode name “低碳经济门户资源整合端口 scripts=CJK”very long name “42”
punycode name “오산헤리티지자이 scripts=HANGUL”very long name “28”
punycode name “praxis-für-verhaltenstherapie scripts=LA”very long name “29”
punycode name “삼성홈주간보호센터 scripts=HANGUL”very long name “31”
punycode name “tasarımatolyesiistanbulacademy scripts=L”very long name “29”
punycode name “ドライバー転職の窓口 scripts=CJK/HIRAGANA/KATAKANA”very long name “32”
punycode name “新疆乡村振兴平台 scripts=CJK”very long name “29”
punycode name “新疆乡村振兴平台 scripts=CJK”very long name “29”
punycode name “태산건물유지보수 scripts=HANGUL”very long name “29”
brand in the name “gmail”brand plus digits “ylhgmail-7658”
TLD with a high abuse rate “top”login form “has_form+login words”
Same data as JSON: /api/zone/risk?day=2026-10-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.