Flagged newborn domains, Friday, August 28, 2026

16 names at tier low or above in .art, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highsc88va.artscore 55echoes bbva· robots.txt denied
brand spelled with digitssc88va→bbvabrand plus digitssc88vabrand name behind Cloudflarecloudflare.combrand name at a retail registrarGoDaddy.com, LLC
Mediumrecord-collection.artscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Lowdttpk.artscore 20· server error
brand in page title, not in the namecloudflare
Lowframein.artscore 20· active website
brand in page title, not in the namegoogle
Lowlinkmanager.artscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowlittlehamster.artscore 20· active website
brand in page title, not in the namerobinhood
Lowpixelneuron.artscore 20· active website
brand in page title, not in the namenamecheap
Lowsproot.artscore 20· active website
brand in page title, not in the namerobinhood
Lowxn----otbjnbb5a1b.artscore 18· robots.txt denied
punycode nameпипл-шоу scripts=CYRILLIC
Lowxn--80adia0adf8b4a2i.artscore 18· active website
punycode nameхмелевская scripts=CYRILLIC
Lowxn--cckzd3g.artscore 18· registrar placeholder
punycode nameアート scripts=KATAKANA/KATAKANA-HIRAGANA
Lowxn--d1acncrdo.artscore 18· blocked the probe
punycode nameкодекор scripts=CYRILLIC
Lowxn--h1agjbb0a7a.artscore 18· robots.txt denied
punycode nameпиплшоу scripts=CYRILLIC
Lowgetpitchit.artscore 14· redirects elsewhere
login formhas_form+login words
Lowjakseltoto.artscore 14· active website
login formhas_form+login words
Lowoke25.artscore 14· active website
login formhas_form+login words

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.