Flagged newborn domains, Wednesday, September 9, 2026

9,947 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “양천구정형외과 scripts=HANGUL”random-looking name “H=4.05”
Lowxn--vcsp3sl8ez79c.vipscore 23· redirects elsewhere
punycode name “怀星国际 scripts=CJK”random-looking name “H=3.64”
punycode name “아이스사이트 scripts=HANGUL”random-looking name “H=3.65”
punycode name “에이스사이트 scripts=HANGUL”random-looking name “H=3.92”
Lowxn--vf4ba69dl6r73r.asiascore 23· empty page
punycode name “손해사정사 scripts=HANGUL”random-looking name “H=3.75”
punycode name “地产信息产业 scripts=CJK”random-looking name “H=3.85”
punycode name “文化信息产业 scripts=CJK”random-looking name “H=3.79”
Lowxn--vhq3ml5am75bdjg2tn.comscore 23· no DNS
punycode name “旅游信息产业 scripts=CJK”random-looking name “H=4.02”
punycode name “能源信息产业 scripts=CJK”random-looking name “H=3.82”
Lowxn--vhq3mlyi8s107a.xn--nqv7fscore 23· no DNS
punycode name “供热产业园 scripts=CJK”random-looking name “H=4.00”
punycode name “水果行业网商 scripts=CJK”random-looking name “H=3.92”
punycode name “부산휴대폰성지 scripts=HANGUL”random-looking name “H=4.17”
Lowxn--vk1b42y74fqwa50i06nfwf.comscore 23· active website
punycode name “청주휴대폰성지 scripts=HANGUL”random-looking name “H=4.05”
punycode name “인천휴대폰성지 scripts=HANGUL”random-looking name “H=4.08”
punycode name “더대표홈페이지 scripts=HANGUL”random-looking name “H=4.17”
punycode name “서울휴대폰성지 scripts=HANGUL”random-looking name “H=3.97”
punycode name “대장바로 scripts=HANGUL”random-looking name “H=3.64”
punycode name “대장방문 scripts=HANGUL”random-looking name “H=3.62”
punycode name “江西日用百货 scripts=CJK”random-looking name “H=4.07”
punycode name “绿色水果产销链 scripts=CJK”random-looking name “H=3.97”
punycode name “印象威尼斯 scripts=CJK”random-looking name “H=3.84”
punycode name “京东人工智能 scripts=CJK”random-looking name “H=3.72”
punycode name “海丝福船 scripts=CJK”random-looking name “H=3.64”
Lowxn--yhq277eojirvi.xn--vhquvscore 23· no DNS
punycode name “海丝福船 scripts=CJK”random-looking name “H=3.64”
Lowxn--z92b113apkfqsc.comscore 23· blocked the probe
punycode name “포천문화 scripts=HANGUL”random-looking name “H=3.88”
punycode name “육성전문 scripts=HANGUL”random-looking name “H=3.64”
punycode name “문서편집 scripts=HANGUL”random-looking name “H=3.77”
punycode name “와와코칭센터 scripts=HANGUL”random-looking name “H=3.82”
punycode name “카센터주소 scripts=HANGUL”random-looking name “H=3.85”
punycode name “새일꾼복지회 scripts=HANGUL”random-looking name “H=3.88”
Low2299adobedam.comscore 22echoes adobe
brand in the name “adobe”brand plus digits “2299adobedam”
Low25jokers4d.topscore 22· active website
TLD with a high abuse rate “top”login form “has_form+login words”
Low25jokers4d.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
Low40wede303.topscore 22· active website
TLD with a high abuse rate “top”login form “has_form+login words”
Low40wede303.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowabcollective.agencyscore 22· active website
page impersonates a brand “NETFLIX”
Lowaccrued.tradescore 22· active website
page impersonates a brand “MetaMask”
Lowacwq.topscore 22· active website
TLD with a high abuse rate “top”login form “has_form+login words”
Lowairsentry.shopscore 22· active website
page impersonates a brand “Paypal”
Lowakunlaku.storescore 22· active website
page impersonates a brand “Netflix”
Lowaltpola777.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowbeaconkapitholmcanada.sitescore 22· active website
page impersonates a brand “Coinbase”
Lowbos138spin.cyouscore 22· active website
TLD with a high abuse rate “cyou”login form “has_form+login words”
Lowbrandonpalisg24gmaill.comscore 22echoes gmail
brand in the name “gmail”brand plus digits “brandonpalisg24gmaill”
Lowbriandoyle.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowbrittofy.comscore 22· active website
page impersonates a brand “NETFLIX”
Lowbrookfield-wrk.infoscore 22· active website
page impersonates a brand “DHL”
Lowcaozuo7.xyzscore 22· boilerplate page
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowcaozuo8.xyzscore 22· boilerplate page
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowcarbon-ledger.techscore 22echoes ledger· active website
ambiguous brand word “ledger”form on a brand-styled page “has_form”

Same data as JSON: /api/zone/risk?day=2026-09-09&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.