Flagged newborn domains, Thursday, October 29, 2026
9,579 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “เซียนล้มโต๊ะบอล scripts=THAI”very long name “29”
punycode name “carpinteriadiseñodeinteriores scripts=LA”very long name “29”
punycode name “desguacedevehículosyrecogida scripts=LAT”very long name “28”
punycode name “elaugedelasacuarelasarequipeñas scripts=”very long name “31”
punycode name “青少年情绪成长中心 scripts=CJK”very long name “34”
punycode name “fumigaciónbiocontrolsannicolas scripts=L”very long name “30”
punycode name “fussbodenheizung-frästechnik scripts=LAT”very long name “28”
punycode name “iglesiapentecostéscasadevida scripts=LAT”very long name “28”
punycode name “çimenzfvoithallisonotomatikşanzıman scri”very long name “34”
punycode name “libreríacristianabibliasmáságape scripts”very long name “32”
punycode name “φαδεργκαρισγκουντκλινινγκεντγκαρντενμειν”very long name “59”
punycode name “서울웨딩박람회일정 scripts=HANGUL”very long name “32”
punycode name “가정용음식물처리기 scripts=HANGUL”very long name “32”
punycode name “노브플라워스튜디오 scripts=HANGUL”very long name “33”
punycode name “양산자이파크팰리체 scripts=HANGUL”very long name “31”
punycode name “programadeestágioopenfinance scripts=LAT”very long name “28”
punycode name “延安农业生态产业平台 scripts=CJK”very long name “33”
punycode name “延安农业生态产业平台 scripts=CJK”very long name “33”
punycode name “奶龙信息科技大学 scripts=CJK”very long name “29”
TLD with a high abuse rate “cfd”login form “has_form+login words”
page impersonates a brand “PayPal”
TLD with a high abuse rate “sbs”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
page impersonates a brand “PayPal”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “Microsoft 365”
page impersonates a brand “Coinbase”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
TLD with a high abuse rate “win”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-10-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.