Flagged newborn domains, Saturday, October 24, 2026
12,505 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
nameserver domain born the same day “growvelox.com”
nameserver domain born the same day “growthisolinecomms.com”
nameserver domain born the same day “growthisolinecomms.com”
nameserver domain born the same day “meetunitedaccountants.com”
nameserver domain born the same day “growvelox.com”
nameserver domain born the same day “intropredict.com”
lure words (login, verify, secure…) “login”many hyphens “4”very long name “28”TLD with a high abuse rate “beauty”
very long name “36”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “service,services”very long name “29”TLD with a high abuse rate “top”
brand in the name “revolut”identical page on many newborns “1454 identical pages”
brand in the name “revolut”identical page on many newborns “65 identical pages”
lure words (login, verify, secure…) “alert,alerts”very long name “31”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “auth,service,services”many hyphens “4”
lure words (login, verify, secure…) “update”many hyphens “4”very long name “29”TLD with a high abuse rate “beauty”
brand in the name “itau”identical page on many newborns “888 identical pages”
very long name “28”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “service,services”very long name “34”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “support”many hyphens “3”very long name “28”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “alert,alerts”very long name “32”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “alert,alerts”very long name “29”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “alert,alerts”very long name “31”TLD with a high abuse rate “xyz”
brand in the name “tmobile”identical page on many newborns “614 identical pages”
very long name “28”brand in page title, not in the name “steam”
punycode name “controlmigrañas scripts=LATIN”form submits over plain HTTP “http://xn--controlmigraas-1nb.online/”
punycode name “ålesundportalen scripts=LATIN”lure words (login, verify, secure…) “portal”
punycode name “pequeñosexploradores scripts=LATIN”form submits over plain HTTP “http://xn--pequeosexploradores-z3b.onlin”
punycode name “portal7estrellaspanadería scripts=LATIN”lure words (login, verify, secure…) “portal”
punycode name “ข้อสอบกพ scripts=THAI”random-looking name “H=3.62”
punycode name “北京胡同 scripts=CJK”random-looking name “H=3.91”
punycode name “야옹이벳이용안내 scripts=HANGUL”random-looking name “H=3.89”
punycode name “잇다이음솔루션 scripts=HANGUL”random-looking name “H=3.92”
punycode name “다모아플라워 scripts=HANGUL”random-looking name “H=3.91”
punycode name “상동롯데캐슬 scripts=HANGUL”random-looking name “H=3.78”
punycode name “성심자동문 scripts=HANGUL”random-looking name “H=3.79”
punycode name “캔디펑크주소 scripts=HANGUL”random-looking name “H=4.01”
punycode name “캔디핑크 scripts=HANGUL”random-looking name “H=3.70”
punycode name “小满在线 scripts=CJK”random-looking name “H=3.66”
punycode name “윈백퍼센트주소 scripts=HANGUL”random-looking name “H=3.97”
punycode name “홈닥터렌탈 scripts=HANGUL”random-looking name “H=3.95”
punycode name “ครูพัสดุ scripts=THAI”random-looking name “H=3.62”
punycode name “คู่มือแทงบอล scripts=THAI”random-looking name “H=3.77”
punycode name “一级教师 scripts=CJK”random-looking name “H=3.75”
punycode name “一二三彩印 scripts=CJK”random-looking name “H=3.75”
punycode name “一级厨师 scripts=CJK”random-looking name “H=3.64”
punycode name “杏吧论坛 scripts=CJK”random-looking name “H=3.77”
punycode name “芯光智造 scripts=CJK”random-looking name “H=3.64”
punycode name “丁氏植润 scripts=CJK”random-looking name “H=3.64”
punycode name “청년상회 scripts=HANGUL”random-looking name “H=3.62”
punycode name “医用自动门 scripts=CJK”random-looking name “H=3.85”
punycode name “어른이집 scripts=HANGUL”random-looking name “H=3.64”
Same data as JSON: /api/zone/risk?day=2026-10-24&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.