Flagged newborn domains, Tuesday, October 6, 2026

10,414 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumxn--kpr97v2o2c5qe.topscore 31· no DNS
punycode name “龍騰平台 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--kpr97v6m2a1fz.topscore 31· not probed yet
punycode name “龙腾平台 scripts=CJK”random-looking name “H=3.91”TLD with a high abuse rate “top”
Mediumxn--kpr97v6m2a1fz.xyzscore 31· not probed yet
punycode name “龙腾平台 scripts=CJK”random-looking name “H=3.91”TLD with a high abuse rate “xyz”
Mediumxn--kpr97vm2cmsk8v7d.topscore 31· no DNS
punycode name “戴高樂平台 scripts=CJK”random-looking name “H=3.73”TLD with a high abuse rate “top”
Mediumxn--kpr97vo7kui6a.topscore 31· not probed yet
punycode name “汇赢平台 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--kpr97vo7kui6a.xyzscore 31· not probed yet
punycode name “汇赢平台 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Mediumxn--kprt4jx6er93d.topscore 31· no DNS
punycode name “逐夢平台 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--kprt5au4rfo1e.topscore 31· no DNS
punycode name “問鼎平台 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--vcs84cp62cmu1ad0jca.topscore 31· not probed yet
punycode name “真龙国际龙头 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “top”
Mediumxn--vcs84cp62cmu1ad0jca.xyzscore 31· not probed yet
punycode name “真龙国际龙头 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “xyz”
Mediumxn--vhqp3y0wd2o8byfw.workscore 31· no DNS
punycode name “工业太阳能 scripts=CJK”random-looking name “H=3.95”TLD with a high abuse rate “work”
Mediumxn--ykqz24a5sz8m2a.topscore 31· no DNS
punycode name “麻將糊了 scripts=CJK”random-looking name “H=3.62”TLD with a high abuse rate “top”
Medium16pct.agencyscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Medium2wanyun.momscore 30· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”
Medium7movies.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”
Mediumadaxi1.sbsscore 30· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”
Mediumadaxi1.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”
lure words (login, verify, secure…) “account,confirm”many hyphens “4”very long name “33”TLD with a high abuse rate “beauty”
many hyphens “4”very long name “45”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “44”brand in page title, not in the name “cloudflare”
Mediumaquaplant.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumarbeblog.topscore 30· active website
TLD with a high abuse rate “top”page impersonates a brand “Binance”
Mediumastonis.orgscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumaur-markstead.topscore 30· active website
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
Mediumauthtiaa.orgscore 30· active website
page asks for credentials “Log in to your account”
Mediumautobuddy.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumautopecastrevo.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumbaoyuncloud.momscore 30· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”
Mediumbestofferselect.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumbetsyadamdress.shopscore 30echoes etsy· boilerplate page
brand in the name “etsy”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “1789 identical pages”
Mediumbibliaparacriancas.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumbookbazar.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumcantodoolho.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumcebustarsales.techscore 30· active website
page asks for credentials “Sign in to your account”
Mediumchernoe-zerkalo-lordfilm.cyouscore 30· active website
TLD with a high abuse rate “cyou”page impersonates a brand “Netflix”
Mediumclicklyeg.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumclinicadotrabalhador.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumcomfi.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumcompraencolombia.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumcomprasfacil.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumcontabilizarltda.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumcozynest.digitalscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumdagey.momscore 30· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”
Mediumdanielmanson.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Microsoft 365”
Mediumdated.workscore 30· active website
TLD with a high abuse rate “work”page impersonates a brand “Netflix”
Mediumdigitalhustle.sitescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumeasygetonline.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumeliteprime.proscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”
Mediumemail-usps.onlinescore 30echoes usps· no DNS
brand in the name “usps”
Mediumesplaygg.proscore 30· active website
page asks for credentials “verify your identity”

Same data as JSON: /api/zone/risk?day=2026-10-06&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.