Flagged newborn domains, Sunday, November 1, 2026
7,024 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “netflix”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
page impersonates a brand “PayPal”
punycode name “บริการรับซ่อมปั๊มน้ํา scripts=THAI”very long name “35”
punycode name “ทางเข้าแม่นําโชค scripts=THAI”very long name “29”
punycode name “고담시티주소안내 scripts=HANGUL”very long name “29”
punycode name “용인고진역로제비앙홈페이지 scripts=HANGUL”very long name “43”
punycode name “돌직구벳주소안내 scripts=HANGUL”very long name “29”
punycode name “한국명상심리협회 scripts=HANGUL”very long name “30”
punycode name “宁夏银行股份有限公司 scripts=CJK”very long name “36”
punycode name “iliokófosintegratedsolutionsgroup script”very long name “33”
punycode name “قمةالجزيرهللمناسباتتاجيرخيامتاجيربيوتش s”very long name “52”
punycode name “شركةسعيدللخاملتجارية scripts=ARABIC”very long name “30”
punycode name “métodoparareorganizarlavidafinanciera sc”very long name “37”
punycode name “尼亞團員團尼亞團員員尼亞團員 scripts=CJK”very long name “32”
punycode name “尼亞團員團尼亞團員員尼亞團員尼尼亞團亞團員尼亞團尼亞團亞團員亞團員員亞團亞團員亞”very long name “61”
punycode name “尼亞團員團尼亞團員員尼亞團員尼尼亞團亞團員尼亞團尼亞團亞團員亞團員員亞團亞團員亞”very long name “61”
punycode name “시흥해양레저관광공모전 scripts=HANGUL”very long name “37”
punycode name “베팅은여기요주소안내 scripts=HANGUL”very long name “36”
punycode name “우리동네보험해결사 scripts=HANGUL”very long name “33”
punycode name “오성종합건물관리 scripts=HANGUL”very long name “30”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
page impersonates a brand “Binance”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
TLD with a high abuse rate “cfd”login form “has_form+login words”
random-looking name “H=3.75”TLD with a high abuse rate “lol”free DNS provider “dnsowl.com”
brand in the name “amazon”brand name on a rarely-seen nameserver “awsdns-17.org”brand's own DNS (reduces score) “ns-1160.awsdns-17.org”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “ledger”
Same data as JSON: /api/zone/risk?day=2026-11-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.