Flagged newborn domains, Saturday, October 31, 2026
8,858 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “xyz”login form “has_form+login words”
TLD with a high abuse rate “top”login form “has_form+login words”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “Binance”
TLD with a high abuse rate “top”page pushes urgent payment “LIMITED TIME OFFER”
lure words (login, verify, secure…) “confirm,confirmation”many hyphens “3”very long name “33”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
TLD with a high abuse rate “work”login form “has_form+login words”
free DNS provider “dnsowl.com”login form “has_form+login words”
page impersonates a brand “Netflix”
page impersonates a brand “Netflix”
punycode name “เด็กเอนใกล้ฉัน scripts=THAI”very long name “29”
punycode name “의정부정형외과신경과 scripts=HANGUL”very long name “34”
punycode name “대구성범죄전문변호사 scripts=HANGUL”very long name “36”
punycode name “아산그랑시티필하우스 scripts=HANGUL”very long name “34”
punycode name “성원시그니엘더부평 scripts=HANGUL”very long name “33”
punycode name “그랑라크에일린의뜰모델하우스 scripts=HANGUL”very long name “46”
punycode name “西部优质茶叶供应商 scripts=CJK”very long name “31”
punycode name “түркиядабалаларжүрекхирургиясы scripts=C”very long name “45”
punycode name “заказпесниотодногодоллара scripts=CYRILL”very long name “33”
punycode name “түркиядабалдардынжүрөкхирургиясы scripts”very long name “51”
punycode name “дитячакардіохірургіятуреччина scripts=CY”very long name “41”
punycode name “детскаякардиохирургиятурция scripts=CYRI”very long name “39”
punycode name “령회계세무사무소 scripts=HANGUL”very long name “28”
punycode name “디즈니평생주소 scripts=HANGUL”very long name “28”
punycode name “云南云塔电力工程有限公司 scripts=CJK”very long name “40”
punycode name “barutagızvedissaglıgıpoliklinigi scripts”very long name “29”
punycode name “certificacióndelenguajeclaro scripts=LAT”very long name “28”
punycode name “condomínioedifíciocortinadampezzo script”very long name “33”
punycode name “宁夏银行股份有限公司 scripts=CJK”very long name “36”
punycode name “วัดระดับภาษาญี่ปุ่น scripts=THAI”very long name “32”
punycode name “เรียนภาษาญี่ปุ่นฟรี scripts=THAI”very long name “31”
punycode name “เรียนภาษาญี่ปุ่น scripts=THAI”very long name “28”
punycode name “中国颐乐园养老服务在线 scripts=CJK”very long name “37”
punycode name “fisioterapiamusculoesquelética scripts=L”very long name “30”
punycode name “مركزمساءالأسترخاءالرياضي scripts=ARABIC”very long name “36”
punycode name “jmbrunoconseilsetdéveloppement scripts=L”very long name “30”
punycode name “malimüşavirmuhammedkendüzler scripts=LAT”very long name “28”
punycode name “개인회생무료자가진단 scripts=HANGUL”very long name “35”
punycode name “동래롯데캐슬시그니처단지내상가 scripts=HANGUL”very long name “50”
punycode name “초이스카지노도메인 scripts=HANGUL”very long name “32”
punycode name “초이스카지노평생도메인 scripts=HANGUL”very long name “38”
punycode name “평생초이스카지노 scripts=HANGUL”very long name “30”
punycode name “초이스카지노주소 scripts=HANGUL”very long name “30”
punycode name “초이스카지노평생 scripts=HANGUL”very long name “30”
punycode name “초이스카지노평생주소 scripts=HANGUL”very long name “36”
punycode name “茗荷谷乳腺クリニック scripts=CJK/KATAKANA”very long name “32”
punycode name “transportesturísticoswilsonportes script”very long name “33”
Same data as JSON: /api/zone/risk?day=2026-10-31&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.