Flagged newborn domains, Sunday, October 25, 2026
6,557 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
nameserver domain born the same day “diggerbiggernice.com”
nameserver domain born the same day “odns.dev”
brand in the name “zelle”identical page on many newborns “820 identical pages”
lure words (login, verify, secure…) “auth”many hyphens “4”very long name “31”TLD with a high abuse rate “beauty”
very long name “35”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “giveaway”many hyphens “3”very long name “31”TLD with a high abuse rate “autos”
very long name “31”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”very long name “29”TLD with a high abuse rate “homes”
lure words (login, verify, secure…) “service,services”very long name “28”TLD with a high abuse rate “homes”
very long name “41”brand in page title, not in the name “namecheap”
very long name “29”brand in page title, not in the name “roblox”
very long name “30”brand in page title, not in the name “roblox”
very long name “29”brand in page title, not in the name “roblox”
lure words (login, verify, secure…) “confirm,pay,update”many hyphens “3”
very long name “39”brand in page title, not in the name “cloudflare”
punycode name “ålesundportalen scripts=LATIN”lure words (login, verify, secure…) “portal”
punycode name “servicebüro-bayreuth scripts=LATIN”lure words (login, verify, secure…) “service”
many hyphens “6”very long name “29”random-looking name “H=3.94”TLD with a high abuse rate “bid”
lure words (login, verify, secure…) “gov”very long name “28”random-looking name “H=3.83”TLD with a high abuse rate “top”
punycode name “抽卡斯蒂从农村 scripts=CJK”random-looking name “H=4.05”
punycode name “ทางเข้ายูฟ่า scripts=THAI”random-looking name “H=3.75”
punycode name “เลขหวยมหาชน scripts=THAI”random-looking name “H=3.82”
punycode name “부동산다움 scripts=HANGUL”random-looking name “H=3.69”
punycode name “버뮤다평도 scripts=HANGUL”random-looking name “H=3.79”
punycode name “버뮤다벳 scripts=HANGUL”random-looking name “H=3.66”
punycode name “卓壮商城 scripts=CJK”random-looking name “H=3.66”
punycode name “姿觉亭具身智能 scripts=CJK”random-looking name “H=4.33”
punycode name “魔力手作茶 scripts=CJK”random-looking name “H=3.72”
punycode name “森辰空间 scripts=CJK”random-looking name “H=3.64”
punycode name “森辰空间 scripts=CJK”random-looking name “H=3.64”
punycode name “新宏昌重工集团 scripts=CJK”random-looking name “H=4.08”
punycode name “法辅在线 scripts=CJK”random-looking name “H=3.91”
punycode name “厚锦智纺 scripts=CJK”random-looking name “H=3.64”
punycode name “คลังประมูล scripts=THAI”random-looking name “H=3.73”
punycode name “一善中医诊所 scripts=CJK”random-looking name “H=3.82”
punycode name “東京タワー scripts=CJK/KATAKANA/KATAKANA-HIRA”random-looking name “H=3.75”
punycode name “黔南拍卖 scripts=CJK”random-looking name “H=3.66”
punycode name “你的網域 scripts=CJK”random-looking name “H=3.64”
punycode name “어른이집 scripts=HANGUL”random-looking name “H=3.64”
punycode name “หวยเฮงเจริญพลัส scripts=THAI”random-looking name “H=3.86”
punycode name “青少年户外研学 scripts=CJK”random-looking name “H=4.02”
punycode name “野生有机海参 scripts=CJK”random-looking name “H=3.78”
punycode name “아테네카지노 scripts=HANGUL”random-looking name “H=4.11”
punycode name “인도네시아 scripts=HANGUL”random-looking name “H=3.73”
punycode name “평생스케일 scripts=HANGUL”random-looking name “H=3.61”
punycode name “칩평생주소 scripts=HANGUL”random-looking name “H=3.85”
punycode name “스케일주소 scripts=HANGUL”random-looking name “H=3.85”
punycode name “스카이차 scripts=HANGUL”random-looking name “H=3.77”
punycode name “스케일입장 scripts=HANGUL”random-looking name “H=3.85”
punycode name “プロップファーム scripts=KATAKANA/KATAKANA-HIRAG”random-looking name “H=3.69”
Same data as JSON: /api/zone/risk?day=2026-10-25&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.