Flagged newborn domains, Thursday, October 8, 2026
10,103 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “Binance”
lure words (login, verify, secure…) “service,services,support”very long name “29”
page impersonates a brand “Netflix”
page impersonates a brand “PayPal”
lure words (login, verify, secure…) “service,services”many hyphens “3”very long name “29”
page impersonates a brand “Binance”
TLD with a high abuse rate “top”login form “has_form+login words”
punycode name “รับทุบตึกรื้อถอนภูเก็ต scripts=THAI”very long name “39”
punycode name “ร้านป้ายพิษณุโลกราคาถูก scripts=THAI”very long name “38”
punycode name “21díaspararecuperartuidentidad scripts=L”very long name “30”
punycode name “두정역그랑피크푸르지오 scripts=HANGUL”very long name “38”
punycode name “송파한국노인복지센터 scripts=HANGUL”very long name “36”
punycode name “รางน้ําฝนนครสวรรค์ scripts=THAI”very long name “33”
punycode name “4rinstalaçõeseletromecânicas scripts=LAT”very long name “28”
punycode name “бюроотделочныхрешений scripts=CYRILLIC”very long name “32”
punycode name “강남언니평생주소 scripts=HANGUL”very long name “29”
punycode name “유니콘평생도메인 scripts=HANGUL”very long name “29”
punycode name “burdurnilşahingüzelliksalonu scripts=LAT”very long name “28”
punycode name “cabañasecoturisticasdechabihau scripts=L”very long name “30”
punycode name “chäse scripts=LATIN”ambiguous brand word “chase”
punycode name “เว็บบ้านบุญหนุน scripts=THAI”very long name “28”
punycode name “丰泽农牧发展集团 scripts=CJK”very long name “30”
punycode name “institut-psychothérapeutique-champagne s”very long name “38”
punycode name “มูลนิธิดีดีเอ็นเอ scripts=THAI”very long name “30”
punycode name “narbenzentrum-niederösterreich scripts=L”very long name “30”
punycode name “두산위브더제니스센트럴상가 scripts=HANGUL”very long name “43”
punycode name “유튜브카지노주소 scripts=HANGUL”very long name “29”
punycode name “케이카지노평생주소 scripts=HANGUL”very long name “34”
punycode name “엠카지노평생주소 scripts=HANGUL”very long name “30”
punycode name “여기여사이트주소 scripts=HANGUL”very long name “30”
punycode name “바시필라테스분당정자점 scripts=HANGUL”very long name “37”
punycode name “鼎泰城建发展集团 scripts=CJK”very long name “30”
punycode name “오산헤리티지자이홈페이지 scripts=HANGUL”very long name “38”
punycode name “ozenbaymakdemirdökümserviscankaya script”very long name “33”
punycode name “미평고운정주간보호센터 scripts=HANGUL”very long name “39”
punycode name “samsunvoleyboliltemsilciliği scripts=LAT”very long name “28”
punycode name “代理店・加盟店募集 scripts=CJK”very long name “34”
punycode name “원조태백물닭갈비 scripts=HANGUL”very long name “29”
punycode name “westfälische-medien-solutions scripts=LA”very long name “29”
punycode name “westfälischemedien-solutions scripts=LAT”very long name “28”
punycode name “zoiconsultorservicosalimentação scripts=”very long name “31”
page impersonates a brand “Microsoft 365”
page impersonates a brand “Coinbase”
TLD with a high abuse rate “xyz”login form “has_form+login words”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “whatsapp”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “outlook”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-10-08&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.