Flagged newborn domains, Friday, August 28, 2026

9,218 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowxn--xcum-8oa.comscore 18
punycode name “xcumè scripts=LATIN”
punycode name “လမ်းညွှန် scripts=MYANMAR”
Lowxn--xkc4elh9fc6f.bikescore 18· registrar placeholder
punycode name “இரும்பு scripts=TAMIL”
Lowxn--xkro0jlsswro.xn--3ds443gscore 18· no DNS
punycode name “华科橡塑 scripts=CJK”
Lowxn--xkry27b.comscore 18
punycode name “华月 scripts=CJK”
punycode name “鑫鲁禹 scripts=CJK”
punycode name “念旧陪伴 scripts=CJK”
punycode name “만듬옷 scripts=HANGUL”
Lowxn--y0x578d.comscore 18
punycode name “金爵 scripts=CJK”
Lowxn--y20az5i.sitescore 18· empty page
punycode name “胖虎 scripts=CJK”
Lowxn--y7yy32c.comscore 18
punycode name “石进 scripts=CJK”
Lowxn--yans-joa.comscore 18
punycode name “yansã scripts=LATIN”
punycode name “yapıcheck scripts=LATIN”
punycode name “yazıcıkiralama scripts=LATIN”
punycode name “yesilbölgemühendislik scripts=LATIN”
Lowxn--yet812j.vipscore 18· boilerplate page
punycode name “小追 scripts=CJK”
punycode name “抹小茗 scripts=CJK”
punycode name “小烧饼 scripts=CJK”
punycode name “麥芝連 scripts=CJK”
punycode name “yıldızoto scripts=LATIN”
punycode name “ymcompañiaelectrica scripts=LATIN”
Lowxn--z92b.netscore 18· no DNS
punycode name “문 scripts=HANGUL”
Lowxn--z92b7qz9tu3a.sitescore 18· no DNS
punycode name “방문요양 scripts=HANGUL”
punycode name “핑크문 scripts=HANGUL”
Lowxn--zdr.bikescore 18· registrar placeholder
punycode name “剛 scripts=CJK”
Lowxn--zf4bt5u.comscore 18
punycode name “최산 scripts=HANGUL”
Lowxn--zf4bt5u.sitescore 18· empty page
punycode name “최산 scripts=HANGUL”
Lowxn--zw0a12v.comscore 18
punycode name “讲者 scripts=CJK”
punycode name “özyakupotomotiv scripts=LATIN”
Lowxn--zyvn-7oa.comscore 18
punycode name “zyvèn scripts=LATIN”
Lowzakon-kamennykh-dzhungley-kinoteatr.homesscore 18· active website
many hyphens “3”very long name “35”TLD with a high abuse rate “homes”
Lowzoom-certs.icuscore 18echoes zoom· no DNS
ambiguous brand word “zoom”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”
Lowzoomawaytravel.shopscore 18· active website
form on a brand-styled page “has_form”
Lowzoomsalepages.onlinescore 18· active website
form on a brand-styled page “has_form”
very long name “32”random-looking name “H=4.10”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.35”TLD with a high abuse rate “cfd”
Lowd623420820a1a940624a5fc6c092b5eb.icuscore 17· boilerplate page
very long name “32”random-looking name “H=3.69”TLD with a high abuse rate “icu”
very long name “38”random-looking name “H=4.37”TLD with a high abuse rate “cfd”
very long name “39”random-looking name “H=4.51”TLD with a high abuse rate “cyou”
Low01fn.topscore 16· robots.txt denied
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low110476k75453cfe45.topscore 16· robots.txt denied
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low1win243.funscore 16· blocked the probe
TLD with a high abuse rate “fun”free DNS provider “dnsowl.com”
Low1win2572.lolscore 16· blocked the probe
TLD with a high abuse rate “lol”free DNS provider “dnsowl.com”
Low1xbet-aflu.topscore 16· blocked the probe
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low1xbet-baj7.cfdscore 16· empty page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1xbet-bbl5.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1xbet-bbn9.cfdscore 16· empty page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1xbet-beus.topscore 16· blocked the probe
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low1xbet-bjx0.cfdscore 16· blocked the probe
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1xbet-bkih.topscore 16· blocked the probe
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.