Flagged newborn domains, Monday, October 5, 2026
6,690 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “top”login form “has_form+login words”
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “cyou”brand in page title, not in the name “whatsapp”
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
TLD with a high abuse rate “homes”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “fun”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “cyou”brand in page title, not in the name “google”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “uniswap”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “spotify”
TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “autos”brand in page title, not in the name “booking”
TLD with a high abuse rate “fun”brand in page title, not in the name “instagram”
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
TLD with a high abuse rate “cfd”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
punycode name “celui-où-anne-et-phil-se-marient scripts”many hyphens “6”very long name “32”
TLD with a high abuse rate “click”brand in page title, not in the name “google”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “sbs”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “fun”brand in page title, not in the name “uniswap”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
punycode name “澳门新葡京导航网 scripts=CJK”very long name “30”random-looking name “H=4.35”
punycode name “德勤华永会计师事务所有限公司 scripts=CJK”very long name “46”random-looking name “H=4.61”
punycode name “重庆环宇铝材有限公司 scripts=CJK”very long name “36”random-looking name “H=4.35”
punycode name “江苏扬建集团有限公司 scripts=CJK”very long name “36”random-looking name “H=4.36”
punycode name “超自然行动组游戏官网 scripts=CJK”very long name “35”random-looking name “H=4.27”
punycode name “แทงหวยเจ้าสมุทร scripts=THAI”very long name “29”random-looking name “H=3.91”
punycode name “เว็บเด่นดวงล็อตโต้ scripts=THAI”very long name “30”random-looking name “H=3.99”
Same data as JSON: /api/zone/risk?day=2026-10-05&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.