Flagged newborn domains, Wednesday, November 11, 2026
2,357 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
punycode name “สมบัติขนส่งโลจิสติกส์ scripts=THAI”very long name “36”random-looking name “H=3.82”
punycode name “ติดตั้งรางน้ําฝนกรุงเทพและปริมณฑล script”very long name “53”random-looking name “H=4.23”
punycode name “รับเหมาก่อสร้างบ้าน scripts=THAI”very long name “32”random-looking name “H=4.19”
punycode name “จัดดอกไม้หน้าศพ scripts=THAI”very long name “29”random-looking name “H=3.76”
punycode name “어반스테이부천신중동역점 scripts=HANGUL”very long name “39”random-looking name “H=4.48”
punycode name “云南一机太工机械制造有限公司 scripts=CJK”very long name “46”random-looking name “H=4.29”
punycode name “รับสร้างบ้านชุมพร scripts=THAI”very long name “29”random-looking name “H=4.15”
punycode name “长生诀歌词合札 scripts=CJK”very long name “28”random-looking name “H=3.95”
punycode name “더팰리스트데시앙 scripts=HANGUL”very long name “29”random-looking name “H=3.83”
punycode name “벽산블루밍더아산 scripts=HANGUL”very long name “29”random-looking name “H=3.99”
punycode name “알루미늄프로파일 scripts=HANGUL”very long name “29”random-looking name “H=4.36”
punycode name “지지벳평생도메인 scripts=HANGUL”very long name “28”random-looking name “H=4.29”
punycode name “정밀판금다인정밀 scripts=HANGUL”very long name “29”random-looking name “H=3.93”
punycode name “链接世界拥抱未来 scripts=CJK”very long name “29”random-looking name “H=4.21”
punycode name “서대구아이큰숲치과 scripts=HANGUL”very long name “31”random-looking name “H=4.12”
punycode name “과천청사역한양수자인 scripts=HANGUL”very long name “35”random-looking name “H=4.25”
punycode name “광주조은이플란트치과 scripts=HANGUL”very long name “36”random-looking name “H=4.29”
punycode name “全球人工智能产业联盟 scripts=CJK”very long name “32”random-looking name “H=3.88”
punycode name “奶龙职业技术学院 scripts=CJK”very long name “30”random-looking name “H=3.97”
punycode name “부천휴대폰성지상동 scripts=HANGUL”very long name “32”random-looking name “H=4.44”
punycode name “휴대폰성지안양점 scripts=HANGUL”very long name “29”random-looking name “H=4.31”
punycode name “대전바른체형센터 scripts=HANGUL”very long name “29”random-looking name “H=3.99”
punycode name “쌍용더플래티넘돈암더힐즈 scripts=HANGUL”very long name “41”random-looking name “H=4.30”
lure words (login, verify, secure…) “access”brand in page title, not in the name “namecheap”
many hyphens “4”very long name “31”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “track”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “taxes”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “account”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “winner”brand in page title, not in the name “telegram”
lure words (login, verify, secure…) “customer,customers,service”TLD with a high abuse rate “cyou”
lure words (login, verify, secure…) “claim”brand in page title, not in the name “monzo”
lure words (login, verify, secure…) “claim,claims,verify”TLD with a high abuse rate “cfd”
lure words (login, verify, secure…) “login”brand in page title, not in the name “godaddy”
lure words (login, verify, secure…) “claim,claims,verify”TLD with a high abuse rate “cfd”
lure words (login, verify, secure…) “parcel”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “invoice”brand in page title, not in the name “onedrive”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “official”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “tiktok”
lure words (login, verify, secure…) “bonus”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “pay”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “password”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “access”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “prize,reward,rewards”TLD with a high abuse rate “xyz”
many hyphens “3”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service”brand in page title, not in the name “whatsapp”
many hyphens “4”brand in page title, not in the name “roblox”
many hyphens “3”brand in page title, not in the name “steam”
Same data as JSON: /api/zone/risk?day=2026-11-11&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.