Flagged newborn domains, Thursday, September 17, 2026

11,750 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode nameグアンダン scripts=KATAKANA
punycode namecódigodivinoams scripts=LATIN
punycode namecódigodivinobispo scripts=LATIN
punycode namecódigodivinofull scripts=LATIN
Lowxn--cdigodivinogr-blb.shopscore 18· robots.txt denied
punycode namecódigodivinogr scripts=LATIN
punycode namecelosías scripts=LATIN
punycode namecentergonçalves scripts=LATIN
punycode namechloédelacour scripts=LATIN
punycode namechoachí scripts=LATIN
Lowxn--chqa.comscore 18
punycode name万万 scripts=CJK
Lowxn--cjrx70fxwv.xn--io0a7iscore 18· empty page
punycode name电化铝 scripts=CJK
punycode name德正堂 scripts=CJK
punycode nameéclatparfumé scripts=LATIN
punycode nameéclaviasolutions scripts=LATIN
Lowxn--cmr062d0uo.sitescore 18· no web server
punycode name芒卿淘 scripts=CJK
punycode namecompañíanieto scripts=LATIN
punycode nameconfíamarket scripts=LATIN
punycode namecorà19 scripts=LATIN
punycode namecorà1919 scripts=LATIN
punycode namecostaórbita scripts=LATIN
punycode namecréadel scripts=LATIN
punycode nameücretsizilan scripts=LATIN
punycode namecrimenenespaña scripts=LATIN
punycode namecristaldesueños scripts=LATIN
Lowxn--crnicasdiarias-mob.techscore 18· empty page
punycode namecrónicasdiarias scripts=LATIN
punycode namecryptorefílls scripts=LATIN
punycode name惠尔多 scripts=CJK
punycode nameczłowiekczlowiekowi scripts=LATIN
Lowxn--d1acynfdd.onlinescore 18· no web server
punycode nameстудент scripts=CYRILLIC
Lowxn--d1ajiccgct9j.onlinescore 18· active website
punycode nameмяснойдом scripts=CYRILLIC
Lowxn--d6qx9b.comscore 18· redirects elsewhere
punycode name关南 scripts=CJK
punycode namedavetinhazır scripts=LATIN
punycode nameバイブコーディング scripts=KATAKANA/KATAKANA-HIRA
punycode namedécortiqué scripts=LATIN
Lowxn--dcortiqu-b1ah.orgscore 18· active website
punycode namedécortiqué scripts=LATIN
punycode namedeğişimpartisi scripts=LATIN
punycode namedievorsorgelösung scripts=LATIN
Lowxn--diqw2yv9b.vipscore 18· boilerplate page
punycode name小丫头 scripts=CJK
punycode namediseñaconcosmos scripts=LATIN
punycode namedivinaprovidência scripts=LATIN
Lowxn--djr834b.xn--6frz82gscore 18· no DNS
punycode name北斗 scripts=CJK
punycode name五菱配件 scripts=CJK
punycode name爱心传递 scripts=CJK
Lowxn--drrz85bbz3a.xn--io0a7iscore 18· no DNS
punycode name材通启 scripts=CJK
punycode nameduránclassic scripts=LATIN
punycode namedynamiqueprovençale scripts=LATIN
punycode nameспецпосол scripts=CYRILLIC
Lowxn--e1ax.comscore 18
punycode nameсе scripts=CYRILLIC
Lowxn--e1ax.youscore 18· no DNS
punycode nameсе scripts=CYRILLIC
punycode nameเอวีนมใหญ่ scripts=THAI

Same data as JSON: /api/zone/risk?day=2026-09-17&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.