Flagged newborn domains, Thursday, August 27, 2026

17,538 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “amgbahìs261 scripts=LATIN”
punycode name “anadolukağitcilik scripts=LATIN”
punycode name “andrèbrady scripts=LATIN”
punycode name “anāhitā scripts=LATIN”
punycode name “ankaraiçmimarlık scripts=LATIN”
punycode name “apitæst scripts=LATIN”
punycode name “词元app scripts=CJK/LATIN”
punycode name “算力app scripts=CJK/LATIN”
punycode name “杏吧app scripts=CJK/LATIN”
Lowxn--aqui-fqa.comscore 18
punycode name “ñaqui scripts=LATIN”
punycode name “çarşambapizzaburger scripts=LATIN”
punycode name “arlisé scripts=LATIN”
punycode name “arnegıda scripts=LATIN”
punycode name “aéroméxico scripts=LATIN”
punycode name “artemisbẹt1200 scripts=LATIN”
punycode name “aselelzéd scripts=LATIN”
punycode name “asküchen scripts=LATIN”
punycode name “asyayönetim scripts=LATIN”
punycode name “atacelikkapı scripts=LATIN”
punycode name “atailetişim scripts=LATIN”
Lowxn--aurs-n3a.comscore 18
punycode name “aurōs scripts=LATIN”
Lowxn--ausflge-bali-hlb.comscore 18· placeholder page
punycode name “ausflüge-bali scripts=LATIN”
punycode name “avcılarescort01 scripts=LATIN”
punycode name “aviaeducação scripts=LATIN”
Lowxn--avr-cma.storescore 18· no DNS
punycode name “avér scripts=LATIN”
punycode name “ayhanotocıkma scripts=LATIN”
punycode name “aykarvinç scripts=LATIN”
Lowxn--b0ta515dksvkse.xn--3ds443gscore 18· no DNS
punycode name “建材建筑网 scripts=CJK”
Lowxn--b0ta515dl1zozn.xn--3ds443gscore 18· no DNS
punycode name “建材建设网 scripts=CJK”
punycode name “路桥建设网 scripts=CJK”
punycode name “建筑资质网 scripts=CJK”
punycode name “智能建筑 scripts=CJK”
punycode name “твердопт scripts=CYRILLIC”
punycode name “ликвид scripts=CYRILLIC”
punycode name “новыйдомик scripts=CYRILLIC”
punycode name “сверхинтеллект scripts=CYRILLIC”
punycode name “устройство scripts=CYRILLIC”
punycode name “топовысок scripts=CYRILLIC”
Lowxn--b1awmew7a6dc.onlinescore 18· empty page
punycode name “вічність scripts=CYRILLIC”
Lowxn--b2sa.onlinescore 18· no DNS
punycode name “婷婷 scripts=CJK”
Lowxn--b2v.bikescore 18
punycode name “棒 scripts=CJK”
Lowxn--b5bpn0m.comscore 18
punycode name “এসইও scripts=BENGALI”
punycode name “넥스주소 scripts=HANGUL”
punycode name “똑똑이 scripts=HANGUL”
Lowxn--b9wx86d.inkscore 18· redirects elsewhere
punycode name “资源 scripts=CJK”
punycode name “bakeryblisscafé scripts=LATIN”
punycode name “baronvanmünsterbv scripts=LATIN”
punycode name “baulöwe1 scripts=LATIN”
punycode name “bayraklıfizyoterapi scripts=LATIN”
Lowxn--bb-fka.comscore 18
punycode name “böb scripts=LATIN”

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.