Flagged newborn domains, Friday, November 6, 2026
12,218 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
many hyphens “3”TLD with a high abuse rate “bond”brand in page title, not in the name “telegram”
many hyphens “3”TLD with a high abuse rate “bond”brand in page title, not in the name “telegram”
many hyphens “4”TLD with a high abuse rate “cfd”brand in page title, not in the name “telegram”
many hyphens “3”TLD with a high abuse rate “bond”brand in page title, not in the name “telegram”
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
punycode name “엘리멘타아카데미 scripts=HANGUL”very long name “30”random-looking name “H=4.21”form submits over plain HTTP “http://xn--2n1b61j0oa75c7yvkza545bmke.sh”
punycode name “더조은파크골프광주 scripts=HANGUL”very long name “32”random-looking name “H=4.22”form submits over plain HTTP “http://xn--bb0b2c71t46wolbdyaz49au7ex7e.”
very long name “29”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
very long name “28”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “parcel,parcels”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “billing,support”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “recover,recovery”brand in page title, not in the name “godaddy”
punycode name “环球纵横 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “top”
punycode name “公益慈善 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “top”
punycode name “環球智遠 scripts=CJK”random-looking name “H=3.75”TLD with a high abuse rate “top”
punycode name “牛皮软件家 scripts=CJK”random-looking name “H=3.83”TLD with a high abuse rate “icu”
punycode name “南方水產網 scripts=CJK”random-looking name “H=3.79”TLD with a high abuse rate “top”
punycode name “阿克苏建工平台 scripts=CJK”random-looking name “H=3.74”TLD with a high abuse rate “click”
punycode name “運転免許証返納 scripts=CJK”random-looking name “H=3.82”TLD with a high abuse rate “xyz”
punycode name “ファミレスランチ scripts=KATAKANA”random-looking name “H=3.68”TLD with a high abuse rate “xyz”
punycode name “ビアンド口コミ scripts=CJK/KATAKANA”random-looking name “H=3.93”TLD with a high abuse rate “xyz”
punycode name “アクシオ買取額 scripts=CJK/KATAKANA”random-looking name “H=3.92”TLD with a high abuse rate “xyz”
punycode name “フィトリフト通販 scripts=CJK/KATAKANA”random-looking name “H=3.98”TLD with a high abuse rate “xyz”
punycode name “恋人未满 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
punycode name “宁波人才網 scripts=CJK”random-looking name “H=3.95”TLD with a high abuse rate “top”
punycode name “宁波人才网 scripts=CJK”random-looking name “H=3.95”TLD with a high abuse rate “top”
punycode name “戀人未滿 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
punycode name “潮汕人去死 scripts=CJK”random-looking name “H=3.85”TLD with a high abuse rate “icu”
punycode name “客家人去死 scripts=CJK”random-looking name “H=3.73”TLD with a high abuse rate “icu”
punycode name “ケノミカ体験 scripts=CJK/KATAKANA”random-looking name “H=3.84”TLD with a high abuse rate “xyz”
punycode name “高校生でミュゼ scripts=CJK/HIRAGANA/KATAKANA”random-looking name “H=3.97”TLD with a high abuse rate “xyz”
punycode name “敦賀で浮気調査 scripts=CJK/HIRAGANA”random-looking name “H=3.75”TLD with a high abuse rate “xyz”
punycode name “廣西鄉村振興 scripts=CJK”random-looking name “H=4.01”TLD with a high abuse rate “top”
punycode name “受験ドクター scripts=CJK/KATAKANA/KATAKANA-HIR”random-looking name “H=3.62”TLD with a high abuse rate “xyz”
punycode name “手の汗抑える scripts=CJK/HIRAGANA”random-looking name “H=4.22”TLD with a high abuse rate “xyz”
punycode name “南方水产网 scripts=CJK”random-looking name “H=3.85”TLD with a high abuse rate “top”
punycode name “天天加班就进 scripts=CJK”random-looking name “H=3.78”TLD with a high abuse rate “icu”
punycode name “最新ニュース scripts=CJK/KATAKANA/KATAKANA-HIR”random-looking name “H=4.04”TLD with a high abuse rate “xyz”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
page asks for credentials “Log In to Account”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
free DNS provider “dnsowl.com”page impersonates a brand “Paypal”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “156 identical pages”
Same data as JSON: /api/zone/risk?day=2026-11-06&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.