Flagged newborn domains, Wednesday, November 4, 2026

11,283 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “西北革命策源地多媒体资源库 scripts=CJK”very long name “47”random-looking name “H=4.36”TLD with a high abuse rate “top”
Mediumallianz-finance.shopscore 34echoes binance· robots.txt denied
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”
Mediumbledger.appscore 34echoes ledger· not probed yet
one-letter brand typo “bledger≈ledger”brand name behind Cloudflare “cloudflare.com”
Mediumbonusholland.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumcloud-storage-home.shopscore 34echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”
Mediumdeltasecuritysol.sbsscore 34· active website
lure words (login, verify, secure…) “security”TLD with a high abuse rate “sbs”brand in page title, not in the name “namecheap”
Mediumpickzyhub.comscore 34· active website
page pushes urgent payment “Limited Time Offer”brand in page title, not in the name “walmart”
Mediumsign-kunden-portal.xyzscore 34· blocked the probe
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumspecialcanineservices.comscore 34· active website
lure words (login, verify, secure…) “service,services”page impersonates a brand “IRS”
Mediumtm-cloud-edge.devscore 34echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”
Mediumupdatesnow.topscore 34· blocked the probe
lure words (login, verify, secure…) “update”TLD with a high abuse rate “top”brand in page title, not in the name “tiktok”
Mediumwelcomebonusuk.sbsscore 34· blocked the probe
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
Mediumxn--hl0bn7xkodvza80mo7ct4a45cp66bbqh.shopscore 33· active website
punycode name “인까사양주소파백화점 scripts=HANGUL”very long name “36”random-looking name “H=4.36”form submits over plain HTTP “http://xn--hl0bn7xkodvza80mo7ct4a45cp66b”
Mediumxn--zb0b8a28vzodf7lhlcr6xo4ag5c64c.shopscore 33· active website
punycode name “두물별관광농원야영장 scripts=HANGUL”very long name “34”random-looking name “H=4.29”form submits over plain HTTP “http://xn--zb0b8a28vzodf7lhlcr6xo4ag5c64”
very long name “39”TLD with a high abuse rate “monster”brand in page title, not in the name “cloudflare”
very long name “42”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
very long name “36”TLD with a high abuse rate “monster”brand in page title, not in the name “cloudflare”
very long name “32”TLD with a high abuse rate “monster”brand in page title, not in the name “cloudflare”
Mediumcarservicesalem.comscore 32· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “booking”
Mediumfreshstartcleaningservices.expertscore 32· parked, for sale
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “godaddy”
very long name “37”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediummcelectricservices.comscore 32· suspended
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “godaddy”
Mediumpayment-settlement.infoscore 32· blocked the probe
lure words (login, verify, secure…) “payment,payments”brand in page title, not in the name “cloudflare”
Mediumwatchfixboxpdx.comscore 32echoes xbox· boilerplate page
brand in the name “xbox”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “649 identical pages”
Mediummcinssecure.comscore 31
lure words (login, verify, secure…) “secure”nameserver domain born the same day “mcneelyinsdirect.com”
lure words (login, verify, secure…) “service”nameserver domain born the same day “growthoughtmix.com”
Mediumxn--1jq80ot6bnwgpq6c.xyzscore 31· empty page
punycode name “小红书商城 scripts=CJK”random-looking name “H=3.84”TLD with a high abuse rate “xyz”
Mediumxn--9cs91cb2cwuim05bfi5a.topscore 31· active website
punycode name “夢想國際官網 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “top”
Mediumxn--9cs91cb2cwuiwyghn6f.topscore 31· active website
punycode name “夢想國際官方 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “top”
Mediumxn--9csv6hhwdiw0b.topscore 31· no DNS
punycode name “科學強國 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--czr13gss0eizf.topscore 31· no DNS
punycode name “大連電商 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--czr13gvv7a8ly.topscore 31· no DNS
punycode name “大连电商 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--gmqr38alogi6zstc230a.xyzscore 31· no DNS
punycode name “超级人工智能 scripts=CJK”random-looking name “H=4.19”TLD with a high abuse rate “xyz”
Mediumxn--gvsx2d53powy.topscore 31· redirects elsewhere
punycode name “最美少妇 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “top”
Mediumxn--jvv50sr2npge00fsmfxv0b.topscore 31· not probed yet
punycode name “超自然黑號查詢 scripts=CJK”random-looking name “H=3.72”TLD with a high abuse rate “top”
Mediumxn--kbtq9u506a2ee.topscore 31· not probed yet
punycode name “賞金官方 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--kbtq9uuk7a50d.topscore 31· not probed yet
punycode name “赏金官方 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--kbtq9uuk7a50d.xyzscore 31· not probed yet
punycode name “赏金官方 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Mediumxn--kpr15es0i443bvmvi6b.topscore 31· not probed yet
punycode name “領航國際平台 scripts=CJK”random-looking name “H=4.01”TLD with a high abuse rate “top”
Mediumxn--kpr15oiucl8jq3nm5t.topscore 31· no DNS
punycode name “數字經濟平台 scripts=CJK”random-looking name “H=4.12”TLD with a high abuse rate “top”
Mediumxn--kpr15oiuco7j0rkfo0a.topscore 31· no DNS
punycode name “数字经济平台 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “top”
Mediumxn--kpr97vh31b50d.topscore 31· not probed yet
punycode name “赏金平台 scripts=CJK”random-looking name “H=3.91”TLD with a high abuse rate “top”
Mediumxn--kpr97vh31b50d.xyzscore 31· not probed yet
punycode name “赏金平台 scripts=CJK”random-looking name “H=3.91”TLD with a high abuse rate “xyz”
Mediumxn--kpr97vst1b2ee.topscore 31· not probed yet
punycode name “賞金平台 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--kprv4ez9i443bl9u36c.topscore 31· not probed yet
punycode name “领航国际平台 scripts=CJK”random-looking name “H=3.98”TLD with a high abuse rate “top”
Mediumxn--kprv4ez9i443bl9u36c.xyzscore 31· not probed yet
punycode name “领航国际平台 scripts=CJK”random-looking name “H=3.98”TLD with a high abuse rate “xyz”
Mediumxn--kprv4ez9idvct8ng42e.xyzscore 31· not probed yet
punycode name “梦想国际平台 scripts=CJK”random-looking name “H=4.01”TLD with a high abuse rate “xyz”
Mediumxn--l6qy10blyd675a.topscore 31· no DNS
punycode name “智慧养老 scripts=CJK”random-looking name “H=3.62”TLD with a high abuse rate “top”
Mediumxn--rpr921jeka44o.funscore 31· no DNS
punycode name “螃蟹账号 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “fun”
Mediumxn--rprs77bnygxmrxmlylcxv2c.topscore 31· active website
punycode name “超自然黑号查询 scripts=CJK”random-looking name “H=3.65”TLD with a high abuse rate “top”

Same data as JSON: /api/zone/risk?day=2026-11-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.