Flagged newborn domains, Tuesday, October 6, 2026

2,902 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumwhtagpgp.vipscore 28· redirects elsewhere
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumwhtoagopp.vipscore 28· redirects elsewhere
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumwiadeuserrant.winscore 28· server error
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”
Mediumwicktail.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”
Mediumwitchyyarnen.cfdscore 28· active website
TLD with a high abuse rate “cfd”brand in page title, not in the name “nationwide”
Mediumwrtst.topscore 28· redirects elsewhere
TLD with a high abuse rate “top”brand in page title, not in the name “intuit”
Mediumwunder-reisen.camscore 28· active website
TLD with a high abuse rate “cam”brand in page title, not in the name “namecheap”
Mediumxgslot88caz.lolscore 28· blocked the probe
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
Mediumxgslot88daz.xyzscore 28· blocked the probe
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”
Mediumxgslot88oaz.lolscore 28· blocked the probe
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”
Mediumxingyunvpn.lolscore 28· active website
TLD with a high abuse rate “lol”brand in page title, not in the name “chatgpt”
Mediumxn--un-sorbito-hoy-un-problema-maana-ncd.sitescore 28· active website
punycode name “un-sorbito-hoy-un-problema-mañana script”many hyphens “5”very long name “33”
Mediumxsensei.menscore 28· redirects elsewhere
TLD with a high abuse rate “men”brand in page title, not in the name “cloudflare”
Mediumy6665.funscore 28· boilerplate page
TLD with a high abuse rate “fun”brand in page title, not in the name “wordpress”
Mediumyaninagomezasesorias.loanscore 28· active website
TLD with a high abuse rate “loan”brand in page title, not in the name “whatsapp”
Mediumyoutubemoney.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”
Mediumzrn360-dev.xyzscore 28· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”
Mediumxn--12cganl0epq4b2ct9db7ae8hbcg7usj.netscore 27· robots.txt denied
punycode name “หจกพิชิตอิเลคทรอนิคส์ scripts=THAI”very long name “35”random-looking name “H=4.39”
punycode name “로얄동호수추천방문예약 scripts=HANGUL”very long name “39”random-looking name “H=4.16”
Mediumxn--2w2b2dy4g83gvygkwrjlbj1g.sitescore 27· active website
punycode name “센텀르엘리버파크 scripts=HANGUL”very long name “28”random-looking name “H=3.90”
punycode name “ร้านติดฟิล์มรถยนต์ศรีนครินทร์ scripts=TH”very long name “44”random-looking name “H=4.29”
Mediumxn--42c5acbeilbb8cwanleccv4d0mcms43cgak.comscore 27· redirects elsewhere
punycode name “ติดฟิล์มรถยนต์ศรีนครินทร์ scripts=THAI”very long name “39”random-looking name “H=4.08”
punycode name “คลิปหลุดออนไลน์ scripts=THAI”very long name “29”random-looking name “H=3.84”
punycode name “รับซ่อมแอร์ตู้คอนโทรล scripts=THAI”very long name “37”random-looking name “H=4.09”
punycode name “苏州思明酒店家具有限公司 scripts=CJK”very long name “41”random-looking name “H=4.35”
punycode name “หวยปลาทองออนไลน์ scripts=THAI”very long name “29”random-looking name “H=4.13”
punycode name “สูบส้วมช่างโจเซอร์วิส scripts=THAI”very long name “39”random-looking name “H=4.34”
punycode name “เว็บไซต์หวยเจ้าสมุทร scripts=THAI”very long name “37”random-looking name “H=4.24”
Mediumxn--9m1bj7w5fr3e8te72a7k351ewff.storescore 27· active website
punycode name “더샵오산역아크시티 scripts=HANGUL”very long name “31”random-looking name “H=4.09”
punycode name “토브리평생도메인 scripts=HANGUL”very long name “29”random-looking name “H=4.31”
Mediumxn--hq1b30gixbf0lwzita851t7hc.netscore 27· active website
punycode name “일프로평생도메인 scripts=HANGUL”very long name “29”random-looking name “H=4.24”
punycode name “벳라이브평생도메인 scripts=HANGUL”very long name “32”random-looking name “H=4.22”
Mediumxn--hq1bx4fp5bkvdlthgol5a440u8sc.netscore 27· active website
punycode name “벳플레이평생도메인 scripts=HANGUL”very long name “32”random-looking name “H=4.42”
Mediumxn--lgbbbaanas8bdogsz6mzbhcn7go.storescore 27· active website
punycode name “تفصيلستائرمجالسالرياض scripts=ARABIC”very long name “31”random-looking name “H=3.76”
Mediumxn--vk1boo94vr2d9qjy7howgp4g.comscore 27· no DNS
punycode name “대부도펜션체크인 scripts=HANGUL”very long name “28”random-looking name “H=4.21”
punycode name “모델하우스대표홈페이지 scripts=HANGUL”very long name “37”random-looking name “H=4.36”
Mediumaisupportdesk.appscore 26· active website
lure words (login, verify, secure…) “support”brand in page title, not in the name “facebook”
Mediumalimonyaccessories.storescore 26· other
lure words (login, verify, secure…) “access”brand in page title, not in the name “cloudflare”
Mediumazsupport.forumscore 26· empty page
lure words (login, verify, secure…) “support”brand in page title, not in the name “amazon”
Mediumbegatrack.techscore 26· redirects elsewhere
lure words (login, verify, secure…) “track”brand in page title, not in the name “whatsapp”
Mediumbevanstreeservice.comscore 26· active website
lure words (login, verify, secure…) “service”brand in page title, not in the name “namecheap”
Mediumbullseye-win.onlinescore 26· blocked the probe
lure words (login, verify, secure…) “win”brand in page title, not in the name “cloudflare”
Mediumbys-user-store-915587.storescore 26· other
many hyphens “3”brand in page title, not in the name “cloudflare”
Mediumbytservice.sitescore 26· active website
lure words (login, verify, secure…) “service”brand in page title, not in the name “namecheap”
Mediumcareerresetlab.storescore 26· active website
lure words (login, verify, secure…) “reset”brand in page title, not in the name “instagram”
Mediumcloverwallet.appscore 26· active website
lure words (login, verify, secure…) “wallet”brand in page title, not in the name “apple”
Mediumeviteaccesspass.spacescore 26· active website
lure words (login, verify, secure…) “access”brand in page title, not in the name “namecheap”
Mediumewebportal.appscore 26· blocked the probe
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
Mediumewebportal.digitalscore 26· blocked the probe
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
Mediumfilowallet.appscore 26· active website
lure words (login, verify, secure…) “wallet”brand in page title, not in the name “apple”

Same data as JSON: /api/zone/risk?day=2026-10-06&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.