Flagged newborn domains, Sunday, October 25, 2026
6,557 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “大学联盟 scripts=CJK”random-looking name “H=3.64”
punycode name “小番茄大王 scripts=CJK”random-looking name “H=3.83”
punycode name “奶龙师范大学 scripts=CJK”random-looking name “H=4.01”
punycode name “奶蛙建筑大学 scripts=CJK”random-looking name “H=3.88”
punycode name “남원사랑 scripts=HANGUL”random-looking name “H=3.77”
punycode name “みんなでかなえるゆめ scripts=HIRAGANA”random-looking name “H=3.92”
punycode name “智慧矿山系统 scripts=CJK”random-looking name “H=4.02”
punycode name “德佑包装 scripts=CJK”random-looking name “H=3.77”
punycode name “렌탈성지 scripts=HANGUL”random-looking name “H=3.64”
punycode name “스케일벳 scripts=HANGUL”random-looking name “H=3.77”
punycode name “평생뽀빠이벳 scripts=HANGUL”random-looking name “H=3.88”
punycode name “뽀빠이벳평생 scripts=HANGUL”random-looking name “H=3.85”
punycode name “뽀빠이벳접속 scripts=HANGUL”random-looking name “H=4.12”
punycode name “뽀빠이벳입장 scripts=HANGUL”random-looking name “H=3.91”
punycode name “数据评估 scripts=CJK”random-looking name “H=3.62”
punycode name “요한탐정사무소 scripts=HANGUL”random-looking name “H=3.97”
punycode name “정든뉴스 scripts=HANGUL”random-looking name “H=3.77”
punycode name “信箱隆实业 scripts=CJK”random-looking name “H=3.72”
punycode name “捷纤实业 scripts=CJK”random-looking name “H=3.88”
punycode name “柔帛实业 scripts=CJK”random-looking name “H=3.77”
punycode name “纸润芳华实业 scripts=CJK”random-looking name “H=3.68”
punycode name “锦妍实业 scripts=CJK”random-looking name “H=3.77”
punycode name “파천시세 scripts=HANGUL”random-looking name “H=3.91”
punycode name “爆破学习系统 scripts=CJK”random-looking name “H=4.30”
punycode name “东盟新材料 scripts=CJK”random-looking name “H=3.73”
punycode name “素丝贸易 scripts=CJK”random-looking name “H=3.77”
punycode name “奶娃回忆录 scripts=CJK”random-looking name “H=3.75”
page impersonates a brand “IRS”
brand in the name “ebay”brand plus digits “1765e-bayshore-206”
brand in the name “revolut”brand plus digits “224revolution”
brand in the name “ebay”brand plus digits “2785riosecodrivebaypoint”
TLD with a high abuse rate “lol”login form “has_form+login words”
TLD with a high abuse rate “sbs”login form “has_form+login words”
page impersonates a brand “PayPal”
page impersonates a brand “DHL”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “Netflix”
page impersonates a brand “PayPal”
page impersonates a brand “Office 365”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “Coinbase”
page impersonates a brand “Paypal”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “IRS”
page impersonates a brand “PayPal”
TLD with a high abuse rate “top”login form “has_form+login words”
page impersonates a brand “Netflix”
Same data as JSON: /api/zone/risk?day=2026-10-25&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.