Flagged newborn domains, Thursday, November 5, 2026
2,684 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “homes”brand in page title, not in the name “shopee”
TLD with a high abuse rate “xyz”brand in page title, not in the name “shopee”
TLD with a high abuse rate “lol”brand in page title, not in the name “telegram”
punycode name “marlen-senst-persönliche-expertise scrip”many hyphens “3”very long name “34”
punycode name “münchen-qa-pre-migration-002 scripts=LAT”many hyphens “4”very long name “28”
punycode name “münchen-qa-pre-migration-002 scripts=LAT”many hyphens “4”very long name “28”
punycode name “오창캠프리지어학원 scripts=HANGUL”very long name “31”form submits over plain HTTP “http://xn--oy2b23ttja4w37ifveh8e72p7va.s”
punycode name “헬로우케어주간보호센터 scripts=HANGUL”very long name “38”form submits over plain HTTP “http://xn--s39a27u3qdjpfmtggsbw7g7vpfyeb”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “icu”brand in page title, not in the name “google”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “cyou”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “lol”brand in page title, not in the name “uber”
TLD with a high abuse rate “top”brand in page title, not in the name “uber”
TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”
punycode name “兇兦屠巢兦妘封妘乥 scripts=CJK”very long name “28”random-looking name “H=3.95”
punycode name “แอร์รถยนต์ภูเก็ต scripts=THAI”very long name “29”random-looking name “H=3.99”
punycode name “เทวาลัยเทพกวนอูช้างเอราวัณ scripts=THAI”very long name “40”random-looking name “H=4.24”
punycode name “안내페이지주소 scripts=HANGUL”very long name “28”random-looking name “H=3.80”
punycode name “广安再生资源平台 scripts=CJK”very long name “29”random-looking name “H=4.13”
punycode name “广安再生资源平台 scripts=CJK”very long name “29”random-looking name “H=4.13”
punycode name “超自然行动官网查询 scripts=CJK”very long name “31”random-looking name “H=4.12”
punycode name “หวยเด่นดวงล็อตโต้ scripts=THAI”very long name “31”random-looking name “H=4.09”
punycode name “한국창업기술교육학원 scripts=HANGUL”very long name “34”random-looking name “H=4.22”
punycode name “서희스타힐스석남역 scripts=HANGUL”very long name “31”random-looking name “H=3.95”
punycode name “파스타는항상옳다 scripts=HANGUL”very long name “29”random-looking name “H=4.11”
punycode name “芦水湾旅游度假区 scripts=CJK”very long name “28”random-looking name “H=4.32”
punycode name “신속안심대리운전 scripts=HANGUL”very long name “28”random-looking name “H=4.29”
punycode name “山东奶龙师范大学 scripts=CJK”very long name “29”random-looking name “H=4.21”
punycode name “广东奶蛙师范大学 scripts=CJK”very long name “28”random-looking name “H=4.16”
punycode name “东方神龙超级数据中心 scripts=CJK”very long name “36”random-looking name “H=4.37”
many hyphens “3”brand in page title, not in the name “roblox”
lure words (login, verify, secure…) “support”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
many hyphens “4”brand in page title, not in the name “roblox”
many hyphens “3”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “locked,official,unlock”TLD with a high abuse rate “cyou”
lure words (login, verify, secure…) “service”brand in page title, not in the name “google”
lure words (login, verify, secure…) “official”brand in page title, not in the name “naver”
Same data as JSON: /api/zone/risk?day=2026-11-05&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.