Flagged newborn domains, Tuesday, November 10, 2026
10,133 names at tier low or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
page impersonates a brand “HMRC”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “Binance”
page impersonates a brand “IRS”
lure words (login, verify, secure…) “service,services,update”very long name “29”
lure words (login, verify, secure…) “reward,rewards”many hyphens “3”very long name “28”
page impersonates a brand “Wells Fargo”
page impersonates a brand “Netflix”
page impersonates a brand “NETFLIX”
page impersonates a brand “Binance”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
page impersonates a brand “Netflix”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “Netflix”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
punycode name “ทุกอย่างถูกหมดยกเว้นเรื่องเดียว scripts=”very long name “51”
punycode name “ประกันการเดินทาง scripts=THAI”very long name “28”
punycode name “ของไหว้พระพิฆเนศ scripts=THAI”very long name “31”
punycode name “고려신용정보일산지점 scripts=HANGUL”very long name “35”
punycode name “사단법인일문구의사선양사업회 scripts=HANGUL”very long name “45”
punycode name “成都市郫都区总工会 scripts=CJK”very long name “29”
punycode name “菲律宾二冷备用三 scripts=CJK”very long name “28”
punycode name “뉴스공인중개사사무소 scripts=HANGUL”very long name “32”
punycode name “ทีเด็ดมวยวันนี้ scripts=THAI”very long name “28”
punycode name “沖縄レッカーサービス scripts=CJK/KATAKANA/KATAKANA”very long name “28”
punycode name “여기여바로가기주소 scripts=HANGUL”very long name “32”
punycode name “무료웹툰바로가기 scripts=HANGUL”very long name “30”
punycode name “주소야바로가기주소 scripts=HANGUL”very long name “31”
punycode name “용인삼가동힐스테이트 scripts=HANGUL”very long name “35”
punycode name “planificaciondeserviciosmalagueños scrip”very long name “34”
punycode name “poieminhasministérioinfantil scripts=LAT”very long name “28”
punycode name “reitschule-münchner-pferdefreunde script”very long name “33”
punycode name “서해주간보호센터 scripts=HANGUL”very long name “30”
punycode name “かわだカラダ整体院 scripts=CJK/HIRAGANA/KATAKANA”very long name “29”
punycode name “税務調査の窓口 scripts=CJK/HIRAGANA”very long name “28”
punycode name “数字龙江城市建设 scripts=CJK”very long name “30”
page impersonates a brand “PayPal”
page impersonates a brand “PayPal”
page impersonates a brand “Netflix”
page impersonates a brand “Paypal”
page impersonates a brand “Netflix”
random-looking name “H=3.88”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services”very long name “28”random-looking name “H=3.63”
Same data as JSON: /api/zone/risk?day=2026-11-10&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.