Flagged newborn domains, Thursday, October 1, 2026

10,743 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “盈牧源养殖 scripts=CJK”random-looking name “H=4.06”
punycode name “みーつけあ scripts=HIRAGANA/KATAKANA-HIRAGANA”random-looking name “H=3.66”
punycode name “상조플랜 scripts=HANGUL”random-looking name “H=3.77”
punycode name “돈워리맘푸드 scripts=HANGUL”random-looking name “H=3.92”
punycode name “ทะเบียนรถหาย scripts=THAI”random-looking name “H=3.79”
Lowxn--nfv425adkug7f.xn--3ds443gscore 23· no DNS
punycode name “远方陶瓷 scripts=CJK”random-looking name “H=3.64”
punycode name “채널부스트 scripts=HANGUL”random-looking name “H=3.68”
punycode name “마을돌봄 scripts=HANGUL”random-looking name “H=3.77”
punycode name “世界文联 scripts=CJK”random-looking name “H=3.64”
Lowxn--rhqr52bpfk20o.xn--3ds443gscore 23· active website
punycode name “强世建设 scripts=CJK”random-looking name “H=3.64”
punycode name “天生胭脂 scripts=CJK”random-looking name “H=3.66”
punycode name “ゲンバジョブ scripts=KATAKANA”random-looking name “H=3.66”
punycode name “잘되는병원 scripts=HANGUL”random-looking name “H=3.68”
punycode name “油脂设备 scripts=CJK”random-looking name “H=3.77”
punycode name “濮阳广播网 scripts=CJK”random-looking name “H=3.73”
punycode name “친절한내과의원 scripts=HANGUL”random-looking name “H=3.97”
punycode name “宣晟湯淺電池 scripts=CJK”random-looking name “H=3.72”
punycode name “天惠国际 scripts=CJK”random-looking name “H=3.64”
punycode name “한방평생주소 scripts=HANGUL”random-looking name “H=3.82”
punycode name “코지주방 scripts=HANGUL”random-looking name “H=3.64”
Lowxn--vhq10kgy8a6sb.xn--3ds443gscore 23· no DNS
punycode name “卓盏瓷业 scripts=CJK”random-looking name “H=3.91”
punycode name “天龙米业 scripts=CJK”random-looking name “H=3.62”
punycode name “中国大健康产业 scripts=CJK”random-looking name “H=3.98”
Lowxn--vhqqb4yq1de7n8kd36m.wangscore 23· no DNS
punycode name “中国大健康产业 scripts=CJK”random-looking name “H=3.98”
punycode name “中国大健康产业 scripts=CJK”random-looking name “H=3.98”
punycode name “工业气体平台 scripts=CJK”random-looking name “H=4.01”
punycode name “广州国际商业港 scripts=CJK”random-looking name “H=4.21”
punycode name “科牧盛牧业 scripts=CJK”random-looking name “H=3.97”
punycode name “苏州联丰木业 scripts=CJK”random-looking name “H=3.88”
punycode name “대덕익스프레스 scripts=HANGUL”random-looking name “H=4.18”
punycode name “대전유흥베스트 scripts=HANGUL”random-looking name “H=4.21”
punycode name “마스터주차대행 scripts=HANGUL”random-looking name “H=4.08”
punycode name “향초목원 scripts=HANGUL”random-looking name “H=3.64”
punycode name “白榆计划 scripts=CJK”random-looking name “H=3.64”
punycode name “예성트럭 scripts=HANGUL”random-looking name “H=3.64”
punycode name “广东省名牌 scripts=CJK”random-looking name “H=3.73”
punycode name “东方读书汇 scripts=CJK”random-looking name “H=3.84”
punycode name “入局计划 scripts=CJK”random-looking name “H=3.66”
punycode name “관악영재사관 scripts=HANGUL”random-looking name “H=3.82”
punycode name “リポスト代行 scripts=CJK/KATAKANA”random-looking name “H=4.04”
punycode name “상품권시세 scripts=HANGUL”random-looking name “H=3.72”
Low69247420.xyzscore 22· empty page
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowaaaopen.topscore 22· active website
TLD with a high abuse rate “top”page pushes urgent payment “risk-free”
Lowaatube.appscore 22· active website
page impersonates a brand “Netflix”
Lowacwapower.livescore 22· active website
page impersonates a brand “PayPal”
Lowaeternamen.infoscore 22· active website
page impersonates a brand “DHL”
Lowaether-infra.comscore 22· active website
page impersonates a brand “PayPal”
Lowailet.funscore 22· active website
TLD with a high abuse rate “fun”login form “has_form+login words”
Lowaiquests.devscore 22· active website
page impersonates a brand “Microsoft 365”
Lowalmavieja.appscore 22· active website
page impersonates a brand “PayPal”

Same data as JSON: /api/zone/risk?day=2026-10-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.