Flagged newborn domains, Thursday, November 5, 2026
10,864 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
lure words (login, verify, secure…) “secure”nameserver domain born the same day “securewindaiapp.com”
lure words (login, verify, secure…) “secure”nameserver domain born the same day “securewindaiapp.com”
lure words (login, verify, secure…) “security”nameserver domain born the same day “securewindaiapp.com”
lure words (login, verify, secure…) “secure”nameserver domain born the same day “securewindaiapp.com”
lure words (login, verify, secure…) “secure”nameserver domain born the same day “securewindaiapp.com”
lure words (login, verify, secure…) “security”nameserver domain born the same day “securewindaiapp.com”
lure words (login, verify, secure…) “security”nameserver domain born the same day “securewindaiapp.com”
lure words (login, verify, secure…) “secure”nameserver domain born the same day “securewindaiapp.com”
lure words (login, verify, secure…) “security”nameserver domain born the same day “securewindaiapp.com”
punycode name “喂哑巴吃芥末 scripts=CJK”random-looking name “H=3.68”TLD with a high abuse rate “icu”
punycode name “禾木農牧 scripts=CJK”random-looking name “H=3.81”TLD with a high abuse rate “top”
punycode name “阿克苏建工平台 scripts=CJK”random-looking name “H=3.74”TLD with a high abuse rate “monster”
punycode name “環球文化 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
punycode name “平安传媒 scripts=CJK”random-looking name “H=3.81”TLD with a high abuse rate “top”
punycode name “杀敌传媒 scripts=CJK”random-looking name “H=3.81”TLD with a high abuse rate “top”
punycode name “自媒体达人签 scripts=CJK”random-looking name “H=3.65”TLD with a high abuse rate “top”
punycode name “自媒體達人簽 scripts=CJK”random-looking name “H=4.00”TLD with a high abuse rate “top”
punycode name “腾讯健康解除 scripts=CJK”random-looking name “H=3.91”TLD with a high abuse rate “xyz”
punycode name “佳樂常安長樂 scripts=CJK”random-looking name “H=4.10”TLD with a high abuse rate “top”
punycode name “賠錢機場 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
punycode name “汉丰牧业 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “xyz”
punycode name “유송콘스 scripts=HANGUL”random-looking name “H=3.66”TLD with a high abuse rate “quest”
punycode name “李嘉欣神经病 scripts=CJK”random-looking name “H=4.01”TLD with a high abuse rate “icu”
punycode name “今日战绩 scripts=CJK”random-looking name “H=3.62”TLD with a high abuse rate “xyz”
punycode name “东升国际 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “lol”
punycode name “李玉生情绪失控 scripts=CJK”random-looking name “H=4.17”TLD with a high abuse rate “icu”
brand in page title, not in the name “hostinger”identical page on many newborns “134 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “134 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “134 identical pages”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
brand in page title, not in the name “hostinger”identical page on many newborns “134 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “134 identical pages”
brand in the name “amazon”
many hyphens “4”very long name “37”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “41”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “40”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “46”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “37”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “39”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “43”brand in page title, not in the name “cloudflare”
many hyphens “5”very long name “47”brand in page title, not in the name “cloudflare”
many hyphens “5”very long name “47”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “37”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “41”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “37”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
brand in page title, not in the name “hostinger”identical page on many newborns “134 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “134 identical pages”
Same data as JSON: /api/zone/risk?day=2026-11-05&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.