Flagged newborn domains, Tuesday, November 3, 2026
9,531 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “PayPal”
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
page impersonates a brand “PayPal”
page impersonates a brand “MetaMask”
page impersonates a brand “Coinbase”
punycode name “경기광주포장이사 scripts=HANGUL”very long name “30”
punycode name “천안두정역푸르지오그랑피크 scripts=HANGUL”very long name “43”
punycode name “힐스테이트송파더그리드 scripts=HANGUL”very long name “39”
punycode name “รับติดตั้งรางน้ําฝนปล่องดูดควันภาคใต้ sc”very long name “58”
punycode name “철갑상어동행사람들 scripts=HANGUL”very long name “32”
punycode name “中国智慧物联管理平台 scripts=CJK”very long name “34”
punycode name “中关村全球创新富豪排行榜 scripts=CJK”very long name “42”
punycode name “中关村幸福女性商学院 scripts=CJK”very long name “36”
punycode name “中关村领袖国际论坛 scripts=CJK”very long name “32”
punycode name “앤텔레콤개통방법 scripts=HANGUL”very long name “29”
punycode name “선불폰선불유심개통 scripts=HANGUL”very long name “31”
punycode name “lokalizacjawyciekuwodygdańsk scripts=LAT”very long name “28”
punycode name “lokalizacjawyciekówwodygdansk scripts=LA”very long name “29”
punycode name “lokalizacjawyciekówwodygdańsk scripts=LA”very long name “29”
punycode name “lokalizacjawyciekówwodygdynia scripts=LA”very long name “29”
punycode name “주소가이드도메인 scripts=HANGUL”very long name “28”
punycode name “신촌에르노플레이스 scripts=HANGUL”very long name “32”
punycode name “observatóriodocongressonacional scripts=”very long name “31”
punycode name “자기주도수학학원 scripts=HANGUL”very long name “28”
punycode name “의정부펠리스타워 scripts=HANGUL”very long name “30”
punycode name “제이에스인테리어 scripts=HANGUL”very long name “28”
punycode name “partitocomunistaunitàpopolare scripts=LA”very long name “29”
punycode name “人头撒来得及啊芦丹氏打撒 scripts=CJK”very long name “40”
punycode name “淄博市妇幼保健院 scripts=CJK”very long name “29”
punycode name “브라보광천주간보호센터 scripts=HANGUL”very long name “36”
punycode name “芸能人噂・経歴恋愛事情裏の顔 scripts=CJK/HIRAGANA”very long name “49”
punycode name “wypożyczalniaosuszaczygdansk scripts=LAT”very long name “28”
punycode name “안산건설안전교육 scripts=HANGUL”very long name “29”
TLD with a high abuse rate “xyz”login form “has_form+login words”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
TLD with a high abuse rate “work”login form “has_form+login words”
random-looking name “H=4.02”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
random-looking name “H=3.79”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services”very long name “30”random-looking name “H=3.90”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “telegram”
brand in page title, not in the name “telegram”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “google”
brand in page title, not in the name “booking”
brand in page title, not in the name “nationwide”
brand in page title, not in the name “etsy”
lure words (login, verify, secure…) “access,auth”TLD with a high abuse rate “icu”
brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-11-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.