Flagged newborn domains, Friday, August 28, 2026

9,218 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowxn--ljqp6j.shopscore 18· no web server
punycode name “卟乖 scripts=CJK”
punycode name “léléganzasanctum scripts=LATIN”
punycode name “lmgrupô scripts=LATIN”
punycode name “lonġevità scripts=LATIN”
punycode name “lıorabeautytr scripts=LATIN”
punycode name “汪苏泷 scripts=CJK”
punycode name “luméva scripts=LATIN”
Lowxn--lvor-bpa.comscore 18
punycode name “lévor scripts=LATIN”
Lowxn--lyra-7pa.comscore 18
punycode name “lyrïa scripts=LATIN”
punycode name “สถิติหวยไทย scripts=THAI”
punycode name “maisonmaïka scripts=LATIN”
punycode name “maisonsigné scripts=LATIN”
punycode name “ımajbet1627 scripts=LATIN”
Lowxn--make-hqa.comscore 18
punycode name “mañke scripts=LATIN”
punycode name “mariscoselmalecón scripts=LATIN”
punycode name “melavéa scripts=LATIN”
punycode name “meritking-güncelgiris scripts=LATIN”
Lowxn--metodoavanar-tdb.shopscore 18· active website
punycode name “metodoavançar scripts=LATIN”
punycode name “meugalpão scripts=LATIN”
punycode name “برايفورا scripts=ARABIC”
punycode name “الجيران scripts=ARABIC”
punycode name “العتيبي scripts=ARABIC”
punycode name “الروقي scripts=ARABIC”
punycode name “migasoleña scripts=LATIN”
punycode name “mirasyöresel scripts=LATIN”
punycode name “代练姱 scripts=CJK”
punycode name “里游代 scripts=CJK”
Lowxn--mnqt77een0a.sitescore 18· empty page
punycode name “代钼游 scripts=CJK”
Lowxn--mnqt77ev62a.sitescore 18· no web server
punycode name “代颊游 scripts=CJK”
Lowxn--mnqz6ev31b.sitescore 18· no web server
punycode name “凤游代 scripts=CJK”
punycode name “münzeviyet scripts=LATIN”
punycode name “mollydjurförsäkringar scripts=LATIN”
punycode name “morphédiagnóstica scripts=LATIN”
Lowxn--mozfinanas-v6a.sitescore 18· robots.txt denied
punycode name “mozfinanças scripts=LATIN”
punycode name “méreacare scripts=LATIN”
punycode name “mrkìng5030 scripts=LATIN”
punycode name “mrkíng5035 scripts=LATIN”
punycode name “mt集团 scripts=CJK/LATIN”
punycode name “métododietoterapia scripts=LATIN”
punycode name “mustafaköse scripts=LATIN”
Lowxn--mx-2na.netscore 18
punycode name “ġmx scripts=LATIN”
punycode name “ômybrunch scripts=LATIN”
Lowxn--n-bhab.comscore 18
punycode name “ûnû scripts=LATIN”
Lowxn--n-dhab.comscore 18
punycode name “ünü scripts=LATIN”
Lowxn--n7q921g.vipscore 18· boilerplate page
punycode name “皇冠 scripts=CJK”
Lowxn--n7qv41q.xn--3ds443gscore 18· no DNS
punycode name “龙冠 scripts=CJK”
punycode name “navaxıon scripts=LATIN”
Lowxn--nckpa.comscore 18
punycode name “ササキ scripts=KATAKANA”
punycode name “时空映射 scripts=CJK”
punycode name “ng棋牌 scripts=CJK/LATIN”

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.