Flagged newborn domains, Saturday, October 17, 2026
2,593 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “tesla”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “autos”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “beauty”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “buzz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “cyou”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “makeup”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “homes”brand in page title, not in the name “chatgpt”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
punycode name “도원결의대한태권도 scripts=HANGUL”very long name “33”form submits over plain HTTP “http://xn--p89a9p14kmwada6630ai1a307chij”
TLD with a high abuse rate “cyou”brand in page title, not in the name “namecheap”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “roblox”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “hair”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
random-looking name “H=3.84”TLD with a high abuse rate “cfd”page pushes urgent payment “Limited Time Offer”
punycode name “ร้านขายตลับลูกปืน scripts=THAI”very long name “29”random-looking name “H=4.21”
punycode name “โครงถักลัลน์ลลิต scripts=THAI”very long name “29”random-looking name “H=3.86”
punycode name “รับทํางานเอกสาร scripts=THAI”very long name “28”random-looking name “H=3.95”
punycode name “สมภพสามยางใหม่กาฬสินธ์ scripts=THAI”very long name “35”random-looking name “H=3.99”
punycode name “ที่พักดอยหลวงเชียงดาว scripts=THAI”very long name “38”random-looking name “H=3.99”
punycode name “รับซื้อเศษเหล็ก scripts=THAI”very long name “28”random-looking name “H=4.32”
punycode name “南京奶龙师范大学 scripts=CJK”very long name “29”random-looking name “H=3.91”
punycode name “영축사동행사람들 scripts=HANGUL”very long name “28”random-looking name “H=3.92”
punycode name “佐藤社会保険労務士事務所 scripts=CJK”very long name “38”random-looking name “H=4.48”
punycode name “湖南第一奶龙大学 scripts=CJK”very long name “29”random-looking name “H=4.46”
punycode name “贵州地矿基础工程有限公司 scripts=CJK”very long name “42”random-looking name “H=4.21”
punycode name “ไร้หญ้าจ๋าหรือมนู scripts=THAI”very long name “32”random-looking name “H=3.89”
punycode name “주소나라평생주소 scripts=HANGUL”very long name “29”random-looking name “H=4.08”
punycode name “생성형엔진최적화 scripts=HANGUL”very long name “28”random-looking name “H=4.24”
punycode name “新能源數字人民幣 scripts=CJK”very long name “30”random-looking name “H=4.21”
punycode name “新能源数字人民币 scripts=CJK”very long name “31”random-looking name “H=4.32”
Same data as JSON: /api/zone/risk?day=2026-10-17&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.