Flagged newborn domains, Saturday, October 24, 2026
12,505 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “전국티비스포츠중계 scripts=HANGUL”very long name “32”
punycode name “木瓜云加速器官网 scripts=CJK”very long name “29”
punycode name “木瓜云加速器官网 scripts=CJK”very long name “29”
punycode name “altascapacidadesysuperdotación scripts=L”very long name “30”
punycode name “asistentederedacciónprofesional scripts=”very long name “31”
punycode name “associaçãodosmotoboymarechal scripts=LAT”very long name “28”
punycode name “中庆投资控股集团 scripts=CJK”very long name “29”
punycode name “中国国际机场加速器 scripts=CJK”very long name “31”
punycode name “中国国际机场加速器 scripts=CJK”very long name “31”
punycode name “中国绿色农副产品供应商 scripts=CJK”very long name “36”
punycode name “모두의프랜차이즈 scripts=HANGUL”very long name “28”
punycode name “βανδερασιωαννησμονοπροσωπηικε scripts=GR”very long name “39”
punycode name “가평설악썬밸리오드카운티 scripts=HANGUL”very long name “42”
punycode name “화서역호수공원아너스빌 scripts=HANGUL”very long name “39”
punycode name “해링턴플레이스양평 scripts=HANGUL”very long name “32”
punycode name “의정부역펠리스타워 scripts=HANGUL”very long name “32”
punycode name “엘리프이천하이시티 scripts=HANGUL”very long name “31”
punycode name “익산세움펠리피아 scripts=HANGUL”very long name “29”
punycode name “ນົກເພັນກວິນຍ່າງແບບຕະຫຼົກ scripts=LAO”very long name “43”
punycode name “伊犁农牧科技平台 scripts=CJK”very long name “30”
punycode name “resguardoindigenacañomochuelo scripts=LA”very long name “29”
punycode name “ລິງໂຕນັ້ນຊົນຕະຫຼອດທັງມື້ scripts=LAO”very long name “43”
punycode name “최주영춘천닭갈비 scripts=HANGUL”very long name “28”
page impersonates a brand “BINANCE”
page impersonates a brand “MetaMask”
page impersonates a brand “Coinbase”
random-looking name “H=3.91”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services”very long name “35”random-looking name “H=3.72”
random-looking name “H=3.93”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services”very long name “39”random-looking name “H=4.42”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “account,accounts”TLD with a high abuse rate “xyz”
brand in page title, not in the name “chatgpt”
brand in page title, not in the name “chatgpt”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “whatsapp”
brand in page title, not in the name “microsoft”
brand in page title, not in the name “booking”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-10-24&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.