Flagged newborn domains, Saturday, October 17, 2026
16,087 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “xyz”login form “has_form+login words”
page impersonates a brand “Microsoft 365”
page impersonates a brand “IRS”
page impersonates a brand “Netflix”
punycode name “หาไรกินขอนแก่น scripts=THAI”very long name “29”
punycode name “เว็บหลักหวยเจ้าสมุทร scripts=THAI”very long name “35”
punycode name “경기오산헤리티지자이 scripts=HANGUL”very long name “34”
punycode name “에그디자인대전본점 scripts=HANGUL”very long name “30”
punycode name “운정서희스타힐스 scripts=HANGUL”very long name “28”
punycode name “ฟูจิอิเล็คทริค scripts=THAI”very long name “28”
punycode name “ตัวแทนจําหน่ายฟูจิอิเล็คทริค scripts=THA”very long name “47”
punycode name “สมเด็จง่วนเชียง scripts=THAI”very long name “30”
punycode name “웰니스동행사람들 scripts=HANGUL”very long name “28”
punycode name “cabañasantacatalinaentilcara scripts=LAT”very long name “28”
punycode name “canjedecarnetdeconducirvenezuelaespaña s”very long name “38”
punycode name “comproorovillanuevadelacañada scripts=LA”very long name “29”
punycode name “comunicación-científicahtml5 scripts=LAT”very long name “28”
punycode name “中国食品饮料物联网 scripts=CJK”very long name “32”
punycode name “klarschiff-entrümpelung-trier scripts=LA”very long name “29”
punycode name “あじさい自転車出張修理店仙台 scripts=CJK/HIRAGANA”very long name “47”
punycode name “negociosganaderos-presentación scripts=L”very long name “30”
punycode name “엠카지노접속주소 scripts=HANGUL”very long name “30”
punycode name “다원방문요양노인복지 scripts=HANGUL”very long name “35”
punycode name “관공서폐기물처리 scripts=HANGUL”very long name “29”
punycode name “수도설비누수탐지 scripts=HANGUL”very long name “29”
punycode name “transportdéménagementmoins3t5 scripts=LA”very long name “29”
punycode name “transportdéménagementmoins3t5 scripts=LA”very long name “29”
punycode name “transportdéménagementmoins3t5 scripts=LA”very long name “29”
punycode name “包装在线资源整合端口 scripts=CJK”very long name “32”
punycode name “에스제이부자철거 scripts=HANGUL”very long name “29”
punycode name “白银机械工程信息平台 scripts=CJK”very long name “36”
page impersonates a brand “Binance”
page impersonates a brand “Netflix”
page impersonates a brand “Netflix”
page impersonates a brand “Netflix”
page impersonates a brand “Coinbase”
random-looking name “H=3.89”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-10-17&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.