Flagged newborn domains, Sunday, October 4, 2026
7,244 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
lure words (login, verify, secure…) “alert,alerts”TLD with a high abuse rate “cfd”login form “has_form+login words”
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “cfd”login form “has_form+login words”
lure words (login, verify, secure…) “alert,alerts”TLD with a high abuse rate “cfd”login form “has_form+login words”
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “xyz”brand in page title, not in the name “apple”
lure words (login, verify, secure…) “member,members”TLD with a high abuse rate “cfd”login form “has_form+login words”
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “cfd”login form “has_form+login words”
lure words (login, verify, secure…) “alert,alerts”TLD with a high abuse rate “cfd”login form “has_form+login words”
lure words (login, verify, secure…) “track”TLD with a high abuse rate “lol”brand in page title, not in the name “telegram”
page pushes urgent payment “Limited time offer”brand in page title, not in the name “apple”
ambiguous brand word “booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”brand name and brand-styled page “booking”
ambiguous brand word “booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”brand name and brand-styled page “booking”
ambiguous brand word “booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”brand name and brand-styled page “booking”
ambiguous brand word “ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”brand name and brand-styled page “ledger”
ambiguous brand word “booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”brand name and brand-styled page “booking”
random-looking name “H=3.75”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
ambiguous brand word “booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”brand name and brand-styled page “booking”
lure words (login, verify, secure…) “reward,rewards”brand in page title, not in the name “tiktok”
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “google”
very long name “29”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “delivery,tax”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “login,service”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “recover,recovery”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “booking”
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “airbnb”
punycode name “喜购城 scripts=CJK”TLD with a high abuse rate “top”form submits over plain HTTP “http://xn--s1ry4cd12g.top/”
punycode name “曦月共享雷达 scripts=CJK”random-looking name “H=4.20”TLD with a high abuse rate “top”
punycode name “曦月共享雷達 scripts=CJK”random-looking name “H=4.11”TLD with a high abuse rate “top”
punycode name “新葡京娛樂城 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “top”
punycode name “传奇一杆枪 scripts=CJK”random-looking name “H=3.73”TLD with a high abuse rate “top”
punycode name “傳奇一杆槍 scripts=CJK”random-looking name “H=3.73”TLD with a high abuse rate “top”
punycode name “南宫西海岸 scripts=CJK”random-looking name “H=3.72”TLD with a high abuse rate “top”
punycode name “南宫西海岸 scripts=CJK”random-looking name “H=3.72”TLD with a high abuse rate “xyz”
punycode name “南宫真龙 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
punycode name “南宫真龙 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “xyz”
punycode name “南宮西海岸 scripts=CJK”random-looking name “H=3.93”TLD with a high abuse rate “top”
punycode name “南宮真龍 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
punycode name “摩登家庭 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “icu”
punycode name “环球娱乐 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
punycode name “新葡京娱乐城 scripts=CJK”random-looking name “H=3.72”TLD with a high abuse rate “top”
punycode name “錢兔預測網 scripts=CJK”random-looking name “H=3.68”TLD with a high abuse rate “top”
punycode name “钱兔预测网 scripts=CJK”random-looking name “H=3.68”TLD with a high abuse rate “top”
punycode name “真龙官网 scripts=CJK”random-looking name “H=4.00”TLD with a high abuse rate “top”
punycode name “真龙官网 scripts=CJK”random-looking name “H=4.00”TLD with a high abuse rate “xyz”
punycode name “真龍官網 scripts=CJK”random-looking name “H=3.62”TLD with a high abuse rate “top”
punycode name “真龍官方 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
punycode name “真龙官方 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
punycode name “真龙官方 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “xyz”
punycode name “西海岸官方 scripts=CJK”random-looking name “H=3.62”TLD with a high abuse rate “top”
punycode name “西海岸官方 scripts=CJK”random-looking name “H=3.62”TLD with a high abuse rate “xyz”
Same data as JSON: /api/zone/risk?day=2026-10-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.