Flagged newborn domains, Sunday, August 30, 2026

6,707 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “前进集团 scripts=CJK”random-looking name “H=3.64”
punycode name “前进齿轮箱 scripts=CJK”random-looking name “H=3.79”
punycode name “亿铭电气 scripts=CJK”random-looking name “H=3.88”
punycode name “生命能科技 scripts=CJK”random-looking name “H=3.84”
Lowxn--mf0bv5h8xhr6iokt.comscore 23· no web server
punycode name “굿모닝통신 scripts=HANGUL”random-looking name “H=3.95”
punycode name “گجترویال scripts=ARABIC”random-looking name “H=3.73”
Lowxn--mnqr32axp1ajqal57c.sitescore 23· no DNS
punycode name “代练赚官网 scripts=CJK”random-looking name “H=3.78”
punycode name “정품슬롯 scripts=HANGUL”random-looking name “H=3.64”
punycode name “数字振荣 scripts=CJK”random-looking name “H=3.64”
punycode name “我的世界服务器 scripts=CJK”random-looking name “H=4.26”
Lowxn--rhqt52d37kbklmh8aica.comscore 23· no DNS
punycode name “麒麟盛世艺术 scripts=CJK”random-looking name “H=4.19”
punycode name “大学城卫星城 scripts=CJK”random-looking name “H=3.83”
punycode name “锦天盛贸易 scripts=CJK”random-looking name “H=3.84”
punycode name “신논현실리프팅 scripts=HANGUL”random-looking name “H=3.86”
punycode name “신논현울쎄라 scripts=HANGUL”random-looking name “H=3.85”
punycode name “신논현여성의원 scripts=HANGUL”random-looking name “H=3.97”
Lowxn--t8j5lhb2esd7501bon5c.comscore 23· active website
punycode name “お手軽ショップ scripts=CJK/HIRAGANA/KATAKANA”random-looking name “H=4.06”
punycode name “电力黄埔 scripts=CJK”random-looking name “H=4.00”
Lowxn--tqq896al5kcst.netscore 23· no DNS
punycode name “沙巴体育 scripts=CJK”random-looking name “H=3.64”
punycode name “天博体育 scripts=CJK”random-looking name “H=3.64”
punycode name “婴幼儿教育 scripts=CJK”random-looking name “H=3.95”
punycode name “논현역피부과 scripts=HANGUL”random-looking name “H=3.88”
punycode name “逐梦国际官网 scripts=CJK”random-looking name “H=3.68”
punycode name “뉴욕한인택시 scripts=HANGUL”random-looking name “H=3.85”
punycode name “뉴저지타다 scripts=HANGUL”random-looking name “H=3.84”
Lowxn--vg1b9hx87c2mb94p.comscore 23· no web server
punycode name “뉴져지타다 scripts=HANGUL”random-looking name “H=3.84”
punycode name “超洋实业 scripts=CJK”random-looking name “H=3.62”
punycode name “逸纤实业 scripts=CJK”random-looking name “H=3.88”
Lowxn--vhqq08ck7szla.onlinescore 23· no DNS
punycode name “职业教育 scripts=CJK”random-looking name “H=3.77”
Lowxn--vhqq08ck7szla.vipscore 23· no DNS
punycode name “职业教育 scripts=CJK”random-looking name “H=3.77”
punycode name “제대로수학 scripts=HANGUL”random-looking name “H=4.06”
punycode name “토르놀이터 scripts=HANGUL”random-looking name “H=4.17”
punycode name “莘生计划 scripts=CJK”random-looking name “H=3.77”
punycode name “오늘의운명 scripts=HANGUL”random-looking name “H=4.09”
punycode name “ストーンフラッシュ scripts=KATAKANA/KATAKANA-HIRA”random-looking name “H=3.64”
punycode name “东方玫瑰谷 scripts=CJK”random-looking name “H=3.93”
punycode name “帛瑞达织造 scripts=CJK”random-looking name “H=3.73”
punycode name “にんにくの豆知識 scripts=CJK/HIRAGANA”random-looking name “H=3.85”
punycode name “丝锦程智纺 scripts=CJK”random-looking name “H=3.79”
Lowxn--ypstir60ekpc.bizscore 23· no DNS
punycode name “天壇生物 scripts=CJK”random-looking name “H=3.66”
Lowxn--z4q863khxcbwh.comscore 23· no DNS
punycode name “词元金融 scripts=CJK”random-looking name “H=3.64”
Lowxn--z92b21ac0gl4iuuaf57dya.shopscore 23· active website
punycode name “이혼전문변호사 scripts=HANGUL”random-looking name “H=4.22”
Low333v.buzzscore 22· active website
TLD with a high abuse rate “buzz”login form “has_form+login words”
Low80shirts.storescore 22· active website
page impersonates a brand “PayPal”
Lowaboveshare.comscore 22· active website
page impersonates a brand “PayPal”
Lowadvanceprints.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowaist.exchangescore 22· active website
page impersonates a brand “Binance”
lure words (login, verify, secure…) “access,alert,security,service”very long name “47”
Lowalon.salescore 22· active website
page impersonates a brand “MetaMask”
Lowampampserbuwow.cyouscore 22· active website
TLD with a high abuse rate “cyou”login form “has_form+login words”

Same data as JSON: /api/zone/risk?day=2026-08-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.