Flagged newborn domains, Thursday, October 22, 2026
16,883 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “旭东 scripts=CJK”
punycode name “쫌 scripts=HANGUL”
punycode name “翰墨秋华 scripts=CJK”
punycode name “华岩智果 scripts=CJK”
punycode name “华岩智装 scripts=CJK”
punycode name “华岩智装 scripts=CJK”
punycode name “温哥华 scripts=CJK”
punycode name “好陪伴 scripts=CJK”
punycode name “德依淘 scripts=CJK”
punycode name “桂花庄 scripts=CJK”
punycode name “小甜心 scripts=CJK”
punycode name “邓小平 scripts=CJK”
punycode name “小牛 scripts=CJK”
punycode name “电来了 scripts=CJK”
punycode name “yılania scripts=LATIN”
punycode name “yılport scripts=LATIN”
punycode name “杨林翼 scripts=CJK”
punycode name “yurtdışılisanspusulası scripts=LATIN”
punycode name “奶龙班 scripts=CJK”
punycode name “元谋家政 scripts=CJK”
punycode name “삼부종합건설 scripts=HANGUL”
punycode name “건설모 scripts=HANGUL”
punycode name “성폭행사건 scripts=HANGUL”
punycode name “문정옥션 scripts=HANGUL”
punycode name “özcepanjur scripts=LATIN”
punycode name “リススマ scripts=KATAKANA”
punycode name “zentoméxico scripts=LATIN”
punycode name “务学淘 scripts=CJK”
punycode name “zinus际诺思 scripts=CJK/LATIN”
punycode name “卐 scripts=CJK”
punycode name “zürichstaubsauger scripts=LATIN”
punycode name “周恩来 scripts=CJK”
ambiguous brand word “tesla”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
very long name “31”random-looking name “H=4.83”TLD with a high abuse rate “top”
very long name “32”random-looking name “H=4.48”TLD with a high abuse rate “xyz”
very long name “57”random-looking name “H=3.69”TLD with a high abuse rate “click”
very long name “32”random-looking name “H=4.23”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.54”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.33”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.31”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.33”TLD with a high abuse rate “xyz”
very long name “31”random-looking name “H=4.89”TLD with a high abuse rate “top”
very long name “57”random-looking name “H=3.66”TLD with a high abuse rate “click”
very long name “32”random-looking name “H=4.33”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.56”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.29”TLD with a high abuse rate “xyz”
very long name “57”random-looking name “H=3.75”TLD with a high abuse rate “click”
very long name “32”random-looking name “H=4.07”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.20”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.26”TLD with a high abuse rate “xyz”
Same data as JSON: /api/zone/risk?day=2026-10-22&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.