Flagged newborn domains, Sunday, November 1, 2026
7,024 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “亿丰淘 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “乔 scripts=CJK”TLD with a high abuse rate “top”
punycode name “好分期 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “紅利 scripts=CJK”TLD with a high abuse rate “top”
punycode name “紫薇斗数 scripts=CJK”TLD with a high abuse rate “top”
punycode name “蜜蜂kimi scripts=CJK/LATIN”TLD with a high abuse rate “top”
punycode name “反目 scripts=CJK”TLD with a high abuse rate “icu”
punycode name “锅锅 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “lx工作室 scripts=CJK/LATIN”TLD with a high abuse rate “xyz”
punycode name “代商练 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “代父园 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “およう願いい安します scripts=CJK/HIRAGANA”TLD with a high abuse rate “beauty”
punycode name “およう願いい安します scripts=CJK/HIRAGANA”TLD with a high abuse rate “lol”
punycode name “およう願いい安します scripts=CJK/HIRAGANA”TLD with a high abuse rate “xyz”
punycode name “蜂學 scripts=CJK”TLD with a high abuse rate “top”
punycode name “官方专拍商品 scripts=CJK”TLD with a high abuse rate “top”
punycode name “发明 scripts=CJK”TLD with a high abuse rate “top”
punycode name “大王 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “天童凯伊 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “世音 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “常识 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “紫薇斗數 scripts=CJK”TLD with a high abuse rate “top”
punycode name “九兒工作室 scripts=CJK”TLD with a high abuse rate “top”
punycode name “曾明君 scripts=CJK”TLD with a high abuse rate “top”
punycode name “初塵依兮 scripts=CJK”TLD with a high abuse rate “top”
punycode name “初尘依兮 scripts=CJK”TLD with a high abuse rate “top”
punycode name “小小然 scripts=CJK”TLD with a high abuse rate “top”
punycode name “小正 scripts=CJK”TLD with a high abuse rate “top”
punycode name “小航 scripts=CJK”TLD with a high abuse rate “icu”
punycode name “小昱 scripts=CJK”TLD with a high abuse rate “xyz”
punycode name “怒小川 scripts=CJK”TLD with a high abuse rate “top”
punycode name “贻笙 scripts=CJK”TLD with a high abuse rate “fun”
random-looking name “H=3.83”brand in page title, not in the name “cloudflare”
nameserver domain born the same day “tryconnectorygroup.com”
nameserver domain born the same day “tryconnectorygroup.com”
nameserver domain born the same day “tryconnectorygroup.com”
nameserver domain born the same day “tryconnectorygroup.com”
nameserver domain born the same day “tryconnectorygroup.com”
nameserver domain born the same day “eterneth.work”
nameserver domain born the same day “roseball.xyz”
brand in the name “gmail”identical page on many newborns “545 identical pages”
lure words (login, verify, secure…) “service,services”very long name “28”TLD with a high abuse rate “buzz”
lure words (login, verify, secure…) “service,services”very long name “29”TLD with a high abuse rate “homes”
brand in the name “revolut”identical page on many newborns “1906 identical pages”
lure words (login, verify, secure…) “service,services”very long name “29”TLD with a high abuse rate “homes”
form on a brand-styled page “has_form”form submits over plain HTTP “http://sableandsteam.shop/”
form on a brand-styled page “has_form”form submits over plain HTTP “http://saffronandsteam.shop/”
very long name “29”brand in page title, not in the name “godaddy”
very long name “29”brand in page title, not in the name “apple”
punycode name “elovixgestão scripts=LATIN”form submits over plain HTTP “http://xn--elovixgesto-i8a.tech/”
Same data as JSON: /api/zone/risk?day=2026-11-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.