Flagged newborn domains, Friday, October 2, 2026

10,356 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “cølnicadra scripts=LATIN”
Lowxn--clockwrk-consulting-v6b.comscore 18· no web server
punycode name “clockwörk-consulting scripts=LATIN”
Lowxn--cnd-ilalb.onlinescore 18· excluded
punycode name “cânädä scripts=LATIN”
punycode name “conheçaacristo scripts=LATIN”
punycode name “converģepay scripts=LATIN”
punycode name “cotéchevale scripts=LATIN”
punycode name “crédia scripts=LATIN”
punycode name “cérémonieinvites scripts=LATIN”
punycode name “cu벳주소 scripts=HANGUL/LATIN”
punycode name “꿈별마루 scripts=HANGUL”
punycode name “电器商城 scripts=CJK”
punycode name “dødsbotømming scripts=LATIN”
punycode name “decontéedash scripts=LATIN”
punycode name “desejô scripts=LATIN”
punycode name “dgdöner scripts=LATIN”
punycode name “dieröstexperten scripts=LATIN”
Lowxn--dierststation-lmb.comscore 18· active website
punycode name “dieröststation scripts=LATIN”
Lowxn--djr621a.vipscore 18· active website
punycode name “北念 scripts=CJK”
punycode name “自由区 scripts=CJK”
punycode name “doñafortunia scripts=LATIN”
punycode name “dolphinfönsterputs scripts=LATIN”
punycode name “drömbostad scripts=LATIN”
punycode name “drömland scripts=LATIN”
punycode name “drouot-enchères scripts=LATIN”
Lowxn--drseracraft-stb7uc.shopscore 18· active website
punycode name “ığdırseracraft scripts=LATIN”
Lowxn--dt-8kb.comscore 18
punycode name “dʘt scripts=LATIN”
punycode name “døtting scripts=LATIN”
Lowxn--e-2y0fy4le7d1vchsfb2wlud.netscore 18· boilerplate page
punycode name “앤텔레콤선불e심 scripts=HANGUL/LATIN”
Lowxn--e-j92f35gw6b.netscore 18· no web server
punycode name “선불e심 scripts=HANGUL/LATIN”
punycode name “선불e심개통 scripts=HANGUL/LATIN”
punycode name “앤텔레콤e심개통 scripts=HANGUL/LATIN”
Lowxn--e1agmn5b.sitescore 18· redirects elsewhere
punycode name “решим scripts=CYRILLIC”
Lowxn--e1agxfbb.onlinescore 18· boilerplate page
punycode name “тетрис scripts=CYRILLIC”
Lowxn--e1aleaff.comscore 18
punycode name “леммон scripts=CYRILLIC”
Lowxn--e6qu8kuy6dkxg.vipscore 18· redirects elsewhere
punycode name “鸿兴国际 scripts=CJK”
punycode name “ebookmilionário scripts=LATIN”
punycode name “ツインレイ scripts=KATAKANA”
punycode name “数字珠三角 scripts=CJK”
punycode name “数字长三角 scripts=CJK”
punycode name “이벤트회사 scripts=HANGUL”
punycode name “elfiñena scripts=LATIN”
Lowxn--elfiena-7za.infoscore 18· registrar placeholder
punycode name “elfiñena scripts=LATIN”
Lowxn--elfiena-7za.storescore 18· registrar placeholder
punycode name “elfiñena scripts=LATIN”
punycode name “enchères-drouot scripts=LATIN”
Lowxn--ende-ooa.onlinescore 18· not probed yet
punycode name “endeä scripts=LATIN”
Lowxn--englnd-zta.onlinescore 18· excluded
punycode name “englând scripts=LATIN”
punycode name “escort-münchen scripts=LATIN”
Lowxn--escortmnchen-jlb.comscore 18· parked with ads
punycode name “escortmünchen scripts=LATIN”
punycode name “espaçocuidarcascavel scripts=LATIN”
Lowxn--est906c.comscore 18
punycode name “百工 scripts=CJK”

Same data as JSON: /api/zone/risk?day=2026-10-02&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.