Flagged newborn domains, Thursday, October 15, 2026
182 names at tier low or above in .net, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
brand in the name “gmail”lure words (login, verify, secure…) “account,accounts”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “tiktok”lure words (login, verify, secure…) “account,accounts”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Tucows Domains Inc.”
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “pay”many hyphens “3”
brand in the name “comcast”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand spelled with digits “dentalit4u→itau”brand plus digits “dentalit4u”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “fedex”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “580 identical pages”
Model opinion: suspicious (target: FedEx), confidence 55%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “amazon”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “hsbc”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “stripe”brand name at a retail registrar “Gname 116 Inc”brand name at a watch-list registrar “Gname 116 Inc”
brand in the name “icloud”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
brand in the name “tmobile”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “cashapp”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “microsoft”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “ebay”brand name at a retail registrar “IONOS SE”
brand in the name “fidelity”brand name at a retail registrar “GoDaddy.com, LLC”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in the name “openai”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “xbox”brand name at a retail registrar “GoDaddy.com, LLC”
one-letter brand typo “bakuten≈rakuten”brand name at a retail registrar “DropCatch.com 714 LLC”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Squarespace Domains II LLC”
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Wix.com Ltd.”
punycode name “ม่อนหมอกเชียงดาว scripts=THAI”very long name “30”random-looking name “H=4.08”
punycode name “绍兴创意防火设备有限公司 scripts=CJK”very long name “41”random-looking name “H=4.31”
punycode name “宁夏贺兰山东麓葡萄酒产区 scripts=CJK”very long name “42”random-looking name “H=4.48”
lure words (login, verify, secure…) “service,services”login form “has_form+login words”
lure words (login, verify, secure…) “update”brand in page title, not in the name “cloudflare”
nameserver domain born the same day “cxoandco-event.net”
lure words (login, verify, secure…) “service,services,support”many hyphens “3”
punycode name “创意防火设备 scripts=CJK”random-looking name “H=3.75”
punycode name “周达达电动行李箱 scripts=CJK”random-looking name “H=4.24”
punycode name “万博体育 scripts=CJK”random-looking name “H=3.77”
punycode name “시너지렌트카 scripts=HANGUL”random-looking name “H=3.63”
punycode name “허브크린 scripts=HANGUL”random-looking name “H=3.77”
punycode name “올바른정형외과 scripts=HANGUL”random-looking name “H=3.81”
punycode name “口了口能 scripts=CJK”random-looking name “H=3.64”
page impersonates a brand “Microsoft 365”
brand in the name “hulu”brand plus digits “gw-129-schulung”
brand in the name “hulu”brand plus digits “gw-129-schulungen”
punycode name “中国四川金钗石斛 scripts=CJK”very long name “30”
punycode name “中国绿松石供应商 scripts=CJK”very long name “29”
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”
brand in page title, not in the name “whatsapp”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
brand in page title, not in the name “wordpress”
Same data as JSON: /api/zone/risk?day=2026-10-15&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.