Flagged newborn domains, Tuesday, November 3, 2026
9,531 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
brand in the name “zelle”identical page on many newborns “3098 identical pages”
brand in the name “zelle”identical page on many newborns “3098 identical pages”
lure words (login, verify, secure…) “giveaway”many hyphens “3”very long name “30”TLD with a high abuse rate “autos”
very long name “31”brand in page title, not in the name “wordpress”
very long name “29”brand in page title, not in the name “wordpress”
very long name “29”brand in page title, not in the name “namecheap”
very long name “28”brand in page title, not in the name “nationwide”
brand in the name “usps”identical page on many newborns “671 identical pages”
lure words (login, verify, secure…) “delivery”many hyphens “3”very long name “28”TLD with a high abuse rate “cyou”
brand in the name “stripe”identical page on many newborns “3098 identical pages”
very long name “35”brand in page title, not in the name “cloudflare”
very long name “29”brand in page title, not in the name “tiktok”
very long name “29”brand in page title, not in the name “amazon”
brand in the name “lineme”identical page on many newborns “58 identical pages”
lure words (login, verify, secure…) “account,accounts,service”many hyphens “3”
punycode name “로에벨헤어 scripts=HANGUL”form submits over plain HTTP “http://xn--2o2bq2fs1jfdt80g.shop/”
punycode name “아빠손약손 scripts=HANGUL”form submits over plain HTTP “http://xn--2x3bi2da309ahi.shop/”
punycode name “鱼鲜生 scripts=CJK”form submits over plain HTTP “http://xn--9myr35f0c.com/”
punycode name “carserviceespaña scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “corodecastañuelasdesegovia scripts=LATIN”form submits over plain HTTP “http://xn--corodecastauelasdesegovia-joc”
punycode name “초코네애견샵 scripts=HANGUL”form submits over plain HTTP “http://xn--l89at8fd1qhje7pl2nd.shop/”
punycode name “on클린 scripts=HANGUL/LATIN”form submits over plain HTTP “http://xn--on-vd0j456e.shop/”
punycode name “어반올리브 scripts=HANGUL”form submits over plain HTTP “http://xn--oy2b97b52b62ngra.shop/”
punycode name “portalleilãodopix scripts=LATIN”lure words (login, verify, secure…) “portal”
punycode name “rajuprıntportal scripts=LATIN”lure words (login, verify, secure…) “portal”
punycode name “øre-nese-hals-sørvest scripts=LATIN”many hyphens “3”
punycode name “scá scripts=LATIN”form submits over plain HTTP “http://xn--sc-nia.online/”
very long name “63”random-looking name “H=3.79”login form “has_form+login words”
punycode name “สหกรณ์บาดาล scripts=THAI”random-looking name “H=3.88”
punycode name “หวยเลขมหาชน scripts=THAI”random-looking name “H=3.92”
punycode name “다온종합클린 scripts=HANGUL”random-looking name “H=3.82”
punycode name “토탈부동산 scripts=HANGUL”random-looking name “H=3.79”
punycode name “목동드림렌즈 scripts=HANGUL”random-looking name “H=3.82”
punycode name “이촌동아파트 scripts=HANGUL”random-looking name “H=3.91”
punycode name “이촌동부동산 scripts=HANGUL”random-looking name “H=4.02”
punycode name “동부이촌동부동산 scripts=HANGUL”random-looking name “H=3.72”
punycode name “동두천포장이사 scripts=HANGUL”random-looking name “H=3.88”
punycode name “해리수디 scripts=HANGUL”random-looking name “H=3.64”
punycode name “李文馨是傻逼 scripts=CJK”random-looking name “H=3.75”
punycode name “รีวิวสินค้าไอที scripts=THAI”random-looking name “H=4.02”
punycode name “ดูบอลคืนนี้ scripts=THAI”random-looking name “H=3.65”
punycode name “เว็บแม่นําโชค scripts=THAI”random-looking name “H=3.97”
punycode name “คาบาเร่ต์โชว์ scripts=THAI”random-looking name “H=3.91”
punycode name “菲律宾九一 scripts=CJK”random-looking name “H=3.84”
punycode name “光华机电 scripts=CJK”random-looking name “H=3.64”
punycode name “색동유랑단 scripts=HANGUL”random-looking name “H=3.85”
punycode name “보험변호사 scripts=HANGUL”random-looking name “H=3.68”
punycode name “ประตูสั่งผลิต scripts=THAI”random-looking name “H=3.89”
punycode name “แม่ทองพูล scripts=THAI”random-looking name “H=3.79”
punycode name “茨木市外構 scripts=CJK”random-looking name “H=3.91”
Same data as JSON: /api/zone/risk?day=2026-11-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.