Flagged newborn domains, Tuesday, October 20, 2026
12,582 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “世界人工智能网 scripts=CJK”random-looking name “H=4.14”
punycode name “红网卫士 scripts=CJK”random-looking name “H=3.64”
punycode name “이분퍼빌 scripts=HANGUL”random-looking name “H=3.66”
punycode name “唐山港物流 scripts=CJK”random-looking name “H=3.73”
punycode name “클린케어맨 scripts=HANGUL”random-looking name “H=3.61”
punycode name “밍키넷주소이동 scripts=HANGUL”random-looking name “H=3.86”
punycode name “키탐넷이동주소 scripts=HANGUL”random-looking name “H=4.05”
punycode name “업벳평생 scripts=HANGUL”random-looking name “H=3.64”
punycode name “뽀빠이벳주소 scripts=HANGUL”random-looking name “H=4.02”
punycode name “벳쥐피티 scripts=HANGUL”random-looking name “H=3.64”
punycode name “หวยสยามพลัส scripts=THAI”random-looking name “H=3.62”
punycode name “법무법인창수 scripts=HANGUL”random-looking name “H=4.02”
punycode name “奶蛙外国语大学 scripts=CJK”random-looking name “H=3.66”
punycode name “卓远建筑实业 scripts=CJK”random-looking name “H=3.97”
punycode name “知窑陶瓷业 scripts=CJK”random-looking name “H=4.04”
punycode name “盏留香瓷业 scripts=CJK”random-looking name “H=3.83”
punycode name “汇诚恒业集团 scripts=CJK”random-looking name “H=3.63”
punycode name “해운대송월 scripts=HANGUL”random-looking name “H=3.73”
punycode name “용산휴대폰성지 scripts=HANGUL”random-looking name “H=4.05”
punycode name “준에이스씽크대 scripts=HANGUL”random-looking name “H=3.94”
punycode name “대한워킹투어 scripts=HANGUL”random-looking name “H=3.85”
punycode name “오케이페이지 scripts=HANGUL”random-looking name “H=3.79”
punycode name “베러브이 scripts=HANGUL”random-looking name “H=3.77”
punycode name “盛源粮油供应链 scripts=CJK”random-looking name “H=4.13”
punycode name “宇海水产 scripts=CJK”random-looking name “H=3.91”
punycode name “新东方康养旅居 scripts=CJK”random-looking name “H=4.11”
punycode name “广西小清华 scripts=CJK”random-looking name “H=3.84”
punycode name “魔戒加速器官网 scripts=CJK”random-looking name “H=4.05”
punycode name “魔戒加速器官网 scripts=CJK”random-looking name “H=4.05”
punycode name “白嫖机场加速器 scripts=CJK”random-looking name “H=4.18”
punycode name “白嫖机场加速器 scripts=CJK”random-looking name “H=4.18”
punycode name “白嫖加速器 scripts=CJK”random-looking name “H=3.83”
punycode name “白嫖加速器 scripts=CJK”random-looking name “H=3.83”
punycode name “시험문제 scripts=HANGUL”random-looking name “H=3.77”
punycode name “에이블관리자 scripts=HANGUL”random-looking name “H=3.78”
punycode name “수도권홈타이 scripts=HANGUL”random-looking name “H=3.82”
punycode name “禾年商务 scripts=CJK”random-looking name “H=3.64”
punycode name “闫士满 scripts=CJK”random-looking name “H=3.70”
page impersonates a brand “Netflix”
TLD with a high abuse rate “click”page pushes urgent payment “Claim your bonus”
page impersonates a brand “Apple ID”
TLD with a high abuse rate “download”login form “has_form+login words”
page impersonates a brand “IRS”
page impersonates a brand “Microsoft 365”
page impersonates a brand “IRS”
page impersonates a brand “PayPal”
lure words (login, verify, secure…) “account,accounts,secure”very long name “54”
lure words (login, verify, secure…) “account,accounts,secure”very long name “55”
lure words (login, verify, secure…) “mfa”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
page impersonates a brand “Binance”
Same data as JSON: /api/zone/risk?day=2026-10-20&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.