Flagged newborn domains, Thursday, October 22, 2026
2,514 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “xyz”brand in page title, not in the name “steam”
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “stream”brand in page title, not in the name “google”
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “xyz”brand in page title, not in the name “namecheap”
TLD with a high abuse rate “sbs”brand in page title, not in the name “telegram”
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “chatgpt”
TLD with a high abuse rate “bid”brand in page title, not in the name “chatgpt”
TLD with a high abuse rate “buzz”brand in page title, not in the name “chatgpt”
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
punycode name “두리사랑어린이집 scripts=HANGUL”very long name “29”form submits over plain HTTP “http://xn--hu1bt5dg3bra250g3yhw9cksg.sho”
punycode name “햇살가득농장펜션 scripts=HANGUL”very long name “29”form submits over plain HTTP “http://xn--o39a88hx2cm0qsxar0zv6ucqd.sho”
punycode name “상록이레어린이집 scripts=HANGUL”very long name “28”form submits over plain HTTP “http://xn--om2b3ft1bx0pctg0ycda459b.shop”
punycode name “아리아펜션리조트 scripts=HANGUL”very long name “28”form submits over plain HTTP “http://xn--oy2ba500dykeba889bowv9ub.shop”
TLD with a high abuse rate “yachts”brand in page title, not in the name “booking”
TLD with a high abuse rate “homes”brand in page title, not in the name “phantom”
TLD with a high abuse rate “top”brand in page title, not in the name “netflix”
TLD with a high abuse rate “lol”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “click”brand in page title, not in the name “google”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “fun”brand in page title, not in the name “twitter”
TLD with a high abuse rate “xyz”brand in page title, not in the name “chatgpt”
punycode name “来年度文化祭予算 scripts=CJK”very long name “29”random-looking name “H=4.01”
punycode name “พัดลมยักษ์ติดเพดาน scripts=THAI”very long name “33”random-looking name “H=4.04”
punycode name “พัดลมท่อกันระเบิด scripts=THAI”very long name “29”random-looking name “H=4.03”
punycode name “อันดามันแอร์รถยนต์ภูเก็ต scripts=THAI”very long name “38”random-looking name “H=3.92”
punycode name “รถสไลด์ขอนแก่นช่างเอ็ม scripts=THAI”very long name “38”random-looking name “H=3.82”
punycode name “พัดลมระบายอากาศหลังคา scripts=THAI”very long name “33”random-looking name “H=4.17”
punycode name “พัดลมดูดอากาศติดผนัง scripts=THAI”very long name “36”random-looking name “H=4.03”
punycode name “พัดลมกันระเบิดติดผนัง scripts=THAI”very long name “34”random-looking name “H=3.99”
punycode name “พัดลมอุตสาหกรรมติดผนัง scripts=THAI”very long name “36”random-looking name “H=3.88”
punycode name “พัดลมระบายอากาศติดผนัง scripts=THAI”very long name “34”random-looking name “H=3.88”
punycode name “พัดลมยักษ์ตั้งพื้น scripts=THAI”very long name “31”random-looking name “H=3.98”
punycode name “주소야최신주소안내 scripts=HANGUL”very long name “30”random-looking name “H=3.80”
punycode name “연동한일베라체파크뷰 scripts=HANGUL”very long name “35”random-looking name “H=4.35”
punycode name “해온장례협동조합 scripts=HANGUL”very long name “29”random-looking name “H=4.11”
punycode name “디자인무지엄사인랩 scripts=HANGUL”very long name “30”random-looking name “H=4.31”
punycode name “힐스테이트오송레이크센트럴오피스텔 scripts=HANGUL”very long name “55”random-looking name “H=4.43”
Same data as JSON: /api/zone/risk?day=2026-10-22&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.