Flagged newborn domains, Friday, October 23, 2026
17,155 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “苏宁网购 scripts=CJK”
punycode name “辽宁建联 scripts=CJK”
punycode name “지랄 scripts=HANGUL”
punycode name “wir-gestalten-gärten scripts=LATIN”
punycode name “房产 scripts=CJK”
punycode name “مزيز scripts=ARABIC”
punycode name “京东城市 scripts=CJK”
punycode name “翰墨秋华 scripts=CJK”
punycode name “嘉华食品 scripts=CJK”
punycode name “หมูหมู scripts=THAI”
punycode name “หวยหมู scripts=THAI”
punycode name “yapbozkırtasiye scripts=LATIN”
punycode name “yazılımodası scripts=LATIN”
punycode name “圣弘康 scripts=CJK”
punycode name “小象超市 scripts=CJK”
punycode name “순자랩 scripts=HANGUL”
punycode name “yrittäjäkoulu scripts=LATIN”
punycode name “ร่ํารวย scripts=THAI”
punycode name “건대술집 scripts=HANGUL”
punycode name “한일증권 scripts=HANGUL”
punycode name “웅비태권도 scripts=HANGUL”
punycode name “旅旗荣耀 scripts=CJK”
punycode name “旅旗荣耀 scripts=CJK”
punycode name “ziołana scripts=LATIN”
punycode name “센터 scripts=HANGUL”
punycode name “zøne scripts=LATIN”
punycode name “özpaşaoğlu scripts=LATIN”
punycode name “özpaşaoğlulojistik scripts=LATIN”
punycode name “玖伶 scripts=CJK”
punycode name “苏帝 scripts=CJK”
lure words (login, verify, secure…) “track,tracking”many hyphens “3”
very long name “32”random-looking name “H=3.84”TLD with a high abuse rate “top”
very long name “32”random-looking name “H=4.14”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.16”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.05”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.18”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.39”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.29”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=3.62”TLD with a high abuse rate “top”
very long name “32”random-looking name “H=3.97”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.41”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.27”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.30”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.24”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.14”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.18”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.02”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.19”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.37”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.41”TLD with a high abuse rate “xyz”
Same data as JSON: /api/zone/risk?day=2026-10-23&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.