Flagged newborn domains, Friday, October 30, 2026
11,861 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “옥인재 scripts=HANGUL”
punycode name “wärmepumpenfreunde scripts=LATIN”
punycode name “百度百科 scripts=CJK”
punycode name “예쁨헤어 scripts=HANGUL”
punycode name “山东新能源 scripts=CJK”
punycode name “山东供销社 scripts=CJK”
punycode name “博华物流 scripts=CJK”
punycode name “菲依班 scripts=CJK”
punycode name “威海家政 scripts=CJK”
punycode name “智能入口 scripts=CJK”
punycode name “yaratıcıprojeler scripts=LATIN”
punycode name “yerindebakım scripts=LATIN”
punycode name “yeslifeyönetim scripts=LATIN”
punycode name “워크샵 scripts=HANGUL”
punycode name “yzfabrikası scripts=LATIN”
punycode name “แหย่หี scripts=THAI”
punycode name “元衡 scripts=CJK”
punycode name “공소청사건조회 scripts=HANGUL”
punycode name “건설안전기술사 scripts=HANGUL”
punycode name “zahradnicképrácerůžička scripts=LATIN”
punycode name “寿回 scripts=CJK”
punycode name “zerocarbónexpress scripts=LATIN”
punycode name “旅游网 scripts=CJK”
punycode name “zéphyoradigital scripts=LATIN”
punycode name “装饰 scripts=CJK”
punycode name “zygayrimenkulmimarlık scripts=LATIN”
lure words (login, verify, secure…) “account,accounts,support”
lure words (login, verify, secure…) “account,service,services”
lure words (login, verify, secure…) “secure,service,services”
lure words (login, verify, secure…) “account,service,services”
very long name “35”random-looking name “H=4.29”TLD with a high abuse rate “cyou”
very long name “35”random-looking name “H=3.89”TLD with a high abuse rate “cyou”
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Same data as JSON: /api/zone/risk?day=2026-10-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.