Flagged newborn domains, Wednesday, October 7, 2026
9,487 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
ambiguous brand word “booking”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “booking”
nameserver domain born the same day “youropstools.com”
nameserver domain born the same day “youropstools.com”
nameserver domain born the same day “youropstools.com”
nameserver domain born the same day “chorzow.ovh”
nameserver domain born the same day “bunkykona.live”
ambiguous brand word “apple”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
very long name “35”brand in page title, not in the name “cloudflare”
brand in the name “ebay”identical page on many newborns “4509 identical pages”
brand in the name “etsy”identical page on many newborns “516 identical pages”
brand in the name “amazon”identical page on many newborns “4509 identical pages”
lure words (login, verify, secure…) “login,portal,service”many hyphens “3”
brand in the name “adobe”identical page on many newborns “1730 identical pages”
very long name “31”brand in page title, not in the name “nationwide”
lure words (login, verify, secure…) “login,secure”very long name “39”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services”very long name “28”free DNS provider “dnsowl.com”
very long name “34”brand in page title, not in the name “roblox”
brand in the name “lineme”many hyphens “4”very long name “36”
brand in the name “hsbc”identical page on many newborns “4226 identical pages”
punycode name “육즙돼지 scripts=HANGUL”form submits over plain HTTP “http://xn--2r1b167agybre.shop/”
punycode name “bañoseguro scripts=LATIN”form submits over plain HTTP “http://xn--baoseguro-m6a.online/”
punycode name “doñapapaservice scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “gebästfastighetsservice scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “모두설비 scripts=HANGUL”form submits over plain HTTP “http://xn--hu1b83ji7cdyd.shop/”
punycode name “가야자원산업 scripts=HANGUL”form submits over plain HTTP “http://xn--o39a950bipdni29b56a.shop/”
punycode name “엠베스트se수창학원 scripts=HANGUL/LATIN”form submits over plain HTTP “http://xn--se-961jw4p6tag9mfybqxvruoogg.”
punycode name “test-afinidad-política-esp scripts=LATIN”many hyphens “3”
punycode name “wállet scripts=LATIN”lure words (login, verify, secure…) “wallet”
punycode name “กรอบแท้ scripts=THAI”random-looking name “H=3.62”
punycode name “จุดแจกข้าว scripts=THAI”random-looking name “H=3.88”
punycode name “หนังโป๊เกาหลี scripts=THAI”random-looking name “H=4.10”
punycode name “บัญชีธุรการ scripts=THAI”random-looking name “H=3.82”
punycode name “주소탁안내 scripts=HANGUL”random-looking name “H=3.83”
punycode name “商标自行注册 scripts=CJK”random-looking name “H=3.98”
punycode name “지역전환배움터 scripts=HANGUL”random-looking name “H=3.97”
punycode name “호텔다락방 scripts=HANGUL”random-looking name “H=4.04”
punycode name “카드깡진행 scripts=HANGUL”random-looking name “H=3.84”
punycode name “이편한부동산 scripts=HANGUL”random-looking name “H=3.88”
punycode name “동영박사 scripts=HANGUL”random-looking name “H=3.64”
punycode name “안성벽산블루밍 scripts=HANGUL”random-looking name “H=4.02”
punycode name “미르한방병원 scripts=HANGUL”random-looking name “H=3.69”
punycode name “宇集团导航 scripts=CJK”random-looking name “H=3.62”
punycode name “宇集团导航 scripts=CJK”random-looking name “H=3.62”
punycode name “สูตรบาคาร่าฟรี scripts=THAI”random-looking name “H=3.65”
punycode name “ชื่อโดเมนคุณ scripts=THAI”random-looking name “H=3.88”
punycode name “김해샷시 scripts=HANGUL”random-looking name “H=3.81”
punycode name “南宫真龙天子 scripts=CJK”random-looking name “H=3.63”
punycode name “南宫真龙天子 scripts=CJK”random-looking name “H=3.63”
punycode name “南宫真龙天子 scripts=CJK”random-looking name “H=3.63”
punycode name “หลอมทองแปดริ้ว scripts=THAI”random-looking name “H=3.94”
Same data as JSON: /api/zone/risk?day=2026-10-07&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.