Flagged newborn domains, Friday, November 13, 2026
2,539 names at tier medium or above, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “lol”brand in page title, not in the name “whatsapp”
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
TLD with a high abuse rate “xyz”brand in page title, not in the name “ledger”
TLD with a high abuse rate “motorcycles”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “click”brand in page title, not in the name “robinhood”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
punycode name “trezòr scripts=LATIN”brand in the name “trezor”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “disney”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “xyz”brand in page title, not in the name “disney”
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”login form “has_form+login words”form submits over plain HTTP “http://zenkap.icu/login.php”
TLD with a high abuse rate “icu”brand in page title, not in the name “instagram”
TLD with a high abuse rate “xyz”brand in page title, not in the name “chatgpt”
TLD with a high abuse rate “makeup”brand in page title, not in the name “cloudflare”
punycode name “คลิปหลุดนักเรียนไทย scripts=THAI”very long name “34”random-looking name “H=4.19”
punycode name “ลอยกระทงเพชรบูรณ์ scripts=THAI”very long name “31”random-looking name “H=4.19”
punycode name “พีพีซีบั๊กเซอร์วิส scripts=THAI”very long name “34”random-looking name “H=3.65”
punycode name “앤텔레콤바다통신 scripts=HANGUL”very long name “29”random-looking name “H=4.18”
punycode name “동탄역헤리움센트럴 scripts=HANGUL”very long name “33”random-looking name “H=4.18”
punycode name “판촉물쇼핑몰분양 scripts=HANGUL”very long name “28”random-looking name “H=4.21”
punycode name “판촉물쇼핑몰창업 scripts=HANGUL”very long name “28”random-looking name “H=4.24”
punycode name “岩井雅志税理士事務所 scripts=CJK”very long name “36”random-looking name “H=4.29”
punycode name “คลิปโป๊โอลี่แฟน scripts=THAI”very long name “28”random-looking name “H=4.10”
punycode name “คลิปหลุดสาวใหญ่ scripts=THAI”very long name “28”random-looking name “H=3.83”
punycode name “อาหารสัตว์เลี้ยง scripts=THAI”very long name “29”random-looking name “H=3.88”
punycode name “รถดูดส้วมช่างโจเซอร์วิส scripts=THAI”very long name “42”random-looking name “H=4.21”
punycode name “รถดูดส้วมช่างโจเซอร์วิส scripts=THAI”very long name “42”random-looking name “H=4.21”
punycode name “상봉더샵퍼스트월드 scripts=HANGUL”very long name “31”random-looking name “H=4.32”
punycode name “문수로비스타더파크 scripts=HANGUL”very long name “33”random-looking name “H=4.10”
punycode name “엘리프시흥더프라임 scripts=HANGUL”very long name “33”random-looking name “H=3.98”
punycode name “오토바이매입전문 scripts=HANGUL”very long name “28”random-looking name “H=3.85”
punycode name “西安电子科技大学 scripts=CJK”very long name “29”random-looking name “H=3.96”
punycode name “河南农业开发平台 scripts=CJK”very long name “28”random-looking name “H=4.10”
punycode name “河南农业开发平台 scripts=CJK”very long name “28”random-looking name “H=4.10”
punycode name “中国生态农林观光产业网 scripts=CJK”very long name “36”random-looking name “H=4.31”
punycode name “인천휴대폰성지마전역 scripts=HANGUL”very long name “35”random-looking name “H=4.42”
punycode name “이편한세상시티천안아산 scripts=HANGUL”very long name “36”random-looking name “H=4.30”
lure words (login, verify, secure…) “track”brand in page title, not in the name “openai”
lure words (login, verify, secure…) “pay”brand in page title, not in the name “cloudflare”
many hyphens “3”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “support”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “reward”brand in page title, not in the name “namecheap”
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “access”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service”brand in page title, not in the name “cloudflare”
Same data as JSON: /api/zone/risk?day=2026-11-13&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.