Flagged newborn domains, Tuesday, November 3, 2026
2,395 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “stream”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “monster”brand in page title, not in the name “telegram”
TLD with a high abuse rate “buzz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “icu”brand in page title, not in the name “binance”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”brand in page title, not in the name “tiktok”
TLD with a high abuse rate “xyz”brand in page title, not in the name “namecheap”
TLD with a high abuse rate “work”brand in page title, not in the name “microsoft”
TLD with a high abuse rate “work”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
punycode name “avxn--ıspartaavukatkevseratabaydag-jmc s”many hyphens “3”very long name “37”
punycode name “하루스테이풀빌라 scripts=HANGUL”very long name “29”form submits over plain HTTP “http://xn--oi2bz0ak2jc5e95g8pqbjfiyb.sho”
punycode name “plätzchen-backen-mit-kindern-in-mannheim”many hyphens “5”very long name “40”
punycode name “plätzchen-backen-mit-kindern-in-mannheim”many hyphens “5”very long name “40”
punycode name “plätzchen-backen-mit-kindern-in-mannheim”many hyphens “5”very long name “40”
punycode name “wo-gibts-den-besten-käesekuchen-in-mannh”many hyphens “6”very long name “43”
punycode name “wo-gibts-den-besten-käesekuchen-in-mannh”many hyphens “6”very long name “43”
punycode name “wo-gibts-den-besten-käesekuchen-in-mannh”many hyphens “6”very long name “43”
TLD with a high abuse rate “fun”brand in page title, not in the name “ledger”
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “namecheap”
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “instagram”
TLD with a high abuse rate “stream”brand in page title, not in the name “cloudflare”
punycode name “和平精英安全绑定检测 scripts=CJK”very long name “34”random-looking name “H=4.43”
punycode name “읍내동쌍용더플래티넘 scripts=HANGUL”very long name “34”random-looking name “H=4.25”
punycode name “희망찬내집협동조합 scripts=HANGUL”very long name “32”random-looking name “H=3.96”
punycode name “ทางเข้าหวยปลาทอง scripts=THAI”very long name “30”random-looking name “H=3.79”
punycode name “동부이촌동아파트 scripts=HANGUL”very long name “28”random-looking name “H=4.16”
punycode name “백운호수푸르지오숲속의아침 scripts=HANGUL”very long name “43”random-looking name “H=4.47”
punycode name “ประตูไม้สังเคราะห์ scripts=THAI”very long name “34”random-looking name “H=4.14”
punycode name “ให้เช่าเครื่องเสียง scripts=THAI”very long name “32”random-looking name “H=4.08”
punycode name “華東旅行社有限公司 scripts=CJK”very long name “33”random-looking name “H=4.09”
punycode name “入库价阿斯兰到家啦收到吗手打 scripts=CJK”very long name “46”random-looking name “H=4.49”
punycode name “บอยท่าพระจันทร์ scripts=THAI”very long name “28”random-looking name “H=4.10”
punycode name “ซีซวนหมอดูไทยจีน scripts=THAI”very long name “30”random-looking name “H=3.99”
punycode name “阿萨德马上到拉克丝久等啦受打击阿萨 scripts=CJK”very long name “56”random-looking name “H=4.62”
punycode name “全球数字化人民币 scripts=CJK”very long name “28”random-looking name “H=4.13”
punycode name “테라신재생에너지 scripts=HANGUL”very long name “29”random-looking name “H=4.38”
Same data as JSON: /api/zone/risk?day=2026-11-03&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.