Flagged newborn domains, Monday, November 9, 2026
1,803 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “bid”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “fun”brand in page title, not in the name “instagram”
TLD with a high abuse rate “top”brand in page title, not in the name “booking”
TLD with a high abuse rate “top”brand in page title, not in the name “google”
TLD with a high abuse rate “fun”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “fun”brand in page title, not in the name “tiktok”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “fun”brand in page title, not in the name “ledger”
TLD with a high abuse rate “cyou”brand in page title, not in the name “tiktok”
free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “walmart”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
TLD with a high abuse rate “click”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
one-letter brand typo “xcloud≈icloud”
TLD with a high abuse rate “buzz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “yachts”brand in page title, not in the name “cloudflare”
punycode name “livraison-à-domicile-de-repas scripts=LA”many hyphens “4”very long name “29”
TLD with a high abuse rate “skin”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “fun”brand in page title, not in the name “twitter”
TLD with a high abuse rate “work”brand in page title, not in the name “openai”
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “monster”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “bond”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “date”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “buzz”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “sbs”brand in page title, not in the name “openai”
punycode name “ไฟแช็กฟู่คุณภาพสูง scripts=THAI”very long name “33”random-looking name “H=3.85”
punycode name “동부이촌동아파트 scripts=HANGUL”very long name “28”random-looking name “H=4.16”
punycode name “동부산포레스트퀸 scripts=HANGUL”very long name “30”random-looking name “H=4.16”
punycode name “윈백퍼센트평생주소 scripts=HANGUL”very long name “29”random-looking name “H=4.31”
punycode name “충청청년스타트업 scripts=HANGUL”very long name “28”random-looking name “H=4.03”
punycode name “ประตูเชียงใหม่ scripts=THAI”very long name “29”random-looking name “H=3.74”
punycode name “지엑스씨평생주소 scripts=HANGUL”very long name “29”random-looking name “H=4.36”
punycode name “쇼미더벳평생도메인 scripts=HANGUL”very long name “32”random-looking name “H=4.01”
punycode name “벳더블유평생도메인 scripts=HANGUL”very long name “32”random-looking name “H=4.31”
punycode name “더샵여주역더퍼스트 scripts=HANGUL”very long name “31”random-looking name “H=4.28”
punycode name “벳더블유평생주소 scripts=HANGUL”very long name “30”random-looking name “H=4.42”
punycode name “쇼미더벳최신주소 scripts=HANGUL”very long name “29”random-looking name “H=4.09”
punycode name “링크모음홈페이지 scripts=HANGUL”very long name “28”random-looking name “H=4.06”
punycode name “海南万诺水产科技有限公司 scripts=CJK”very long name “43”random-looking name “H=4.45”
punycode name “中国家居网上商城 scripts=CJK”very long name “28”random-looking name “H=4.21”
punycode name “壹号娱乐官网入口页 scripts=CJK”very long name “33”random-looking name “H=4.48”
punycode name “넥스트챕터파트너스 scripts=HANGUL”very long name “31”random-looking name “H=4.12”
punycode name “베트맨평생도메인 scripts=HANGUL”very long name “28”random-looking name “H=4.10”
Same data as JSON: /api/zone/risk?day=2026-11-09&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.