Flagged newborn domains, Saturday, October 24, 2026
2,506 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
lure words (login, verify, secure…) “official”brand in page title, not in the name “hostinger”identical page on many newborns “85 identical pages”
page impersonates a brand “Binance”login form “has_form+login words”
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Register SPA”
one-letter brand typo “vcloud≈icloud”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
page impersonates a brand “PayPal”page pushes urgent payment “risk-free”
one-letter brand typo “finance≈binance”brand name at a retail registrar “Name.com, Inc.”
one-letter brand typo “finance≈binance”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.S.”
one-letter brand typo “sterling≈starling”brand name at a retail registrar “Gransy, s.r.o.”
one-letter brand typo “stride≈stripe”brand name at a retail registrar “Squarespace Domains LLC”
page impersonates a brand “Amazon Prime”login form “has_form+login words”
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Name.com, Inc.”
page impersonates a brand “Microsoft 365”login form “has_form+login words”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Xin Net Technology Corporation”
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “GoDaddy.com, LLC”
TLD with a high abuse rate “click”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
one-letter brand typo “tresor≈trezor”brand name at a retail registrar “GoDaddy.com, LLC”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
one-letter brand typo “whatapp≈whatsapp”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
one-letter brand typo “whatapp≈whatsapp”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “whatapp≈whatsapp”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “xfxinity≈xfinity”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
punycode name “citibánk scripts=LATIN”brand in the name “citibank”brand name at a retail registrar “GoDaddy.com, LLC”
many hyphens “3”TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
many hyphens “3”TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
punycode name “浮気調査・みよし市 scripts=CJK/HIRAGANA”very long name “31”random-looking name “H=4.28”TLD with a high abuse rate “xyz”
punycode name “一本道安全入会申し込み方法 scripts=CJK/HIRAGANA”very long name “44”random-looking name “H=4.36”TLD with a high abuse rate “xyz”
punycode name “引越し業者見積もり scripts=CJK/HIRAGANA”very long name “31”random-looking name “H=4.14”TLD with a high abuse rate “xyz”
punycode name “刺すヒアルロン酸シート通販 scripts=CJK/HIRAGANA/KATAK”very long name “38”random-looking name “H=4.35”TLD with a high abuse rate “xyz”
punycode name “天然むすめ入会の魅力と安全性 scripts=CJK/HIRAGANA”very long name “43”random-looking name “H=4.56”TLD with a high abuse rate “xyz”
punycode name “髪の毛ツヤツヤにする方法 scripts=CJK/HIRAGANA/KATAKA”very long name “33”random-looking name “H=3.89”TLD with a high abuse rate “xyz”
punycode name “最高のスロットを逃す scripts=CJK/HIRAGANA/KATAKANA”very long name “32”random-looking name “H=4.19”TLD with a high abuse rate “xyz”
punycode name “目のクマを消す方法 scripts=CJK/HIRAGANA/KATAKANA”very long name “30”random-looking name “H=4.07”TLD with a high abuse rate “xyz”
punycode name “ゼファルリン公式通販 scripts=CJK/KATAKANA”very long name “32”random-looking name “H=4.35”TLD with a high abuse rate “xyz”
punycode name “フィンジア育毛剤通販 scripts=CJK/KATAKANA”very long name “32”random-looking name “H=4.31”TLD with a high abuse rate “xyz”
punycode name “エアツリーマットレス店舗 scripts=CJK/KATAKANA/KATAKA”very long name “31”random-looking name “H=3.98”TLD with a high abuse rate “xyz”
punycode name “カリビアンコム入会申込方法 scripts=CJK/KATAKANA”very long name “39”random-looking name “H=4.37”TLD with a high abuse rate “xyz”
punycode name “新型コロナウィルス感染防止 scripts=CJK/KATAKANA”very long name “39”random-looking name “H=4.17”TLD with a high abuse rate “xyz”
punycode name “薬剤師求人総合病院薬局千葉市 scripts=CJK”very long name “47”random-looking name “H=4.47”TLD with a high abuse rate “xyz”
punycode name “好評看護師求人転職 scripts=CJK”very long name “31”random-looking name “H=4.16”TLD with a high abuse rate “xyz”
punycode name “美容医師求人情報 scripts=CJK”very long name “30”random-looking name “H=4.09”TLD with a high abuse rate “xyz”
punycode name “酵素ダイエットやり方 scripts=CJK/HIRAGANA/KATAKANA”very long name “31”random-looking name “H=4.32”TLD with a high abuse rate “xyz”
punycode name “速報ニュース画像あり scripts=CJK/HIRAGANA/KATAKANA”very long name “32”random-looking name “H=4.28”TLD with a high abuse rate “xyz”
punycode name “育毛剤ブブカ通販 scripts=CJK/KATAKANA”very long name “29”random-looking name “H=4.13”TLD with a high abuse rate “xyz”
punycode name “働きやすいデリヘル熊本 scripts=CJK/HIRAGANA/KATAKAN”very long name “32”random-looking name “H=4.28”TLD with a high abuse rate “xyz”
punycode name “宇都宮で浮気調査 scripts=CJK/HIRAGANA”very long name “31”random-looking name “H=4.17”TLD with a high abuse rate “xyz”
punycode name “盛岡市で浮気調査 scripts=CJK/HIRAGANA”very long name “31”random-looking name “H=3.75”TLD with a high abuse rate “xyz”
punycode name “包茎手術福岡では scripts=CJK/HIRAGANA”very long name “28”random-looking name “H=3.90”TLD with a high abuse rate “xyz”
punycode name “包茎手術名古屋では scripts=CJK/HIRAGANA”very long name “31”random-looking name “H=4.28”TLD with a high abuse rate “xyz”
Same data as JSON: /api/zone/risk?day=2026-10-24&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.