Flagged newborn domains, Friday, October 2, 2026
10,356 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “Apple ID”
page impersonates a brand “Microsoft 365”
page impersonates a brand “Netflix”
page impersonates a brand “Netflix”
lure words (login, verify, secure…) “support”lure suffix “teamsupportonline”TLD with a high abuse rate “cfd”
page impersonates a brand “Coinbase”
page impersonates a brand “Netflix”
TLD with a high abuse rate “cam”login form “has_form+login words”
page impersonates a brand “Netflix”
page impersonates a brand “Netflix”
page impersonates a brand “PayPal”
page impersonates a brand “Netflix”
TLD with a high abuse rate “sbs”login form “has_form+login words”
TLD with a high abuse rate “fun”page pushes urgent payment “LIMITED TIME OFFER”
page impersonates a brand “Amazon Prime”
lure words (login, verify, secure…) “security,service,services”very long name “31”
TLD with a high abuse rate “click”page pushes urgent payment “claim your bonus”
punycode name “강원도동해고물상 scripts=HANGUL”very long name “29”
punycode name “ateşnakliyatevdenevetaşımacılık scripts=”very long name “28”
punycode name “despachojurídicovaldesalanis scripts=LAT”very long name “28”
punycode name “中国智能家居电商平台 scripts=CJK”very long name “35”
punycode name “临沂商城国际选品中心 scripts=CJK”very long name “35”
punycode name “中国食用菌供应商 scripts=CJK”very long name “30”
punycode name “中国高端实木门商城 scripts=CJK”very long name “33”
punycode name “guíadeestudiodearmonizaciónfacial214 scr”very long name “36”
punycode name “앤텔레콤선불유심칩개통 scripts=HANGUL”very long name “38”
punycode name “institucioneducativatecnicalaenseñanzade”very long name “47”
punycode name “안양홈페이지제작 scripts=HANGUL”very long name “28”
punycode name “مكتبالمحاميعبدالعزيزظافرالشهراني scripts”very long name “47”
punycode name “캡스온라인가입센터 scripts=HANGUL”very long name “32”
punycode name “ผู้รับเหมานนทบุรี scripts=THAI”very long name “30”
punycode name “아크원푸르지오청라 scripts=HANGUL”very long name “31”
punycode name “앤텔레콤선불유심칩 scripts=HANGUL”very long name “32”
punycode name “pèlerinageagriculteurslourdes scripts=LA”very long name “29”
punycode name “sehirlerarasıevdenevenakliyat scripts=LA”very long name “28”
punycode name “sostenibilità-economica-sociale scripts=”very long name “31”
punycode name “sostenibilità-sociale-economica scripts=”very long name “31”
punycode name “sostenibilitàeconomicaesociale scripts=L”very long name “30”
punycode name “sostenibilitàeconomicasociale scripts=LA”very long name “29”
punycode name “신호등매운갈비찜 scripts=HANGUL”very long name “29”
page impersonates a brand “IRS”
page impersonates a brand “Netflix”
many hyphens “3”TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
many hyphens “3”TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
brand in page title, not in the name “godaddy”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
very long name “28”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-10-02&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.