Flagged newborn domains, Saturday, October 10, 2026

9,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowtunziz77.xyzscore 22· active website
TLD with a high abuse rate “xyz”page pushes urgent payment “CLAIM YOUR BONUS”
Lowtvstrainingandserviceslimited.shopscore 22· active website
lure words (login, verify, secure…) “limited,service,services”very long name “29”
Lowtyuyamunoidic.infoscore 22· active website
page impersonates a brand “IRS”
Lowubb8.topscore 22· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”form submits over plain HTTP “http://ubb8.top/index/login/index?code=1”
Lowulexitoidic.infoscore 22· active website
page impersonates a brand “IRS”
Lowultimatefundingtool.xyzscore 22· active website
TLD with a high abuse rate “xyz”page pushes urgent payment “risk-free”
Lowumengaming.storescore 22· active website
page impersonates a brand “Netflix”
Lowuncleeddy.boatsscore 22· active website
TLD with a high abuse rate “boats”page pushes urgent payment “ACT NOW”
Lowusdtbep20.lifescore 22· active website
page impersonates a brand “MetaMask”
Lowvelinne.storescore 22· active website
page impersonates a brand “Paypal”
Lowvexarox.shopscore 22· active website
page impersonates a brand “Binance”
Lowvipgoodman.topscore 22· parked, for sale
TLD with a high abuse rate “top”login form “has_form+login words”
Lowwb-gov.topscore 22· no web server
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Lowwe-gov.topscore 22· boilerplate page
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Lowwf-gov.topscore 22· boilerplate page
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Lowwg-gov.topscore 22· boilerplate page
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Lowwh-gov.topscore 22· boilerplate page
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Lowwhaleflow.funscore 22· active website
TLD with a high abuse rate “fun”login form “has_form+login words”
Lowxn--12ca9cbflub2dwa6c1czcd7bzbul98a.comscore 22· active website
punycode name “อุดมศักดิ์รับทุบตึก scripts=THAI”very long name “35”
punycode name “ขายเหล็กถูกจันทบุรีเพ็ชรไทยสตีล scripts=”very long name “50”
punycode name “บ้านพักแพรวดาวติดวัดพลวงเขาคิชฌกูฏ scrip”very long name “53”
punycode name “푸르지오그랑피크 scripts=HANGUL”very long name “29”
punycode name “한국전통회화예술학회 scripts=HANGUL”very long name “32”
punycode name “アニメ専門学校ガイド scripts=CJK/KATAKANA”very long name “30”
punycode name “留学エージェントガイド scripts=CJK/KATAKANA/KATAKAN”very long name “29”
punycode name “太陽光発電見積ガイド scripts=CJK/KATAKANA”very long name “34”
punycode name “事故物件売却ガイド scripts=CJK/KATAKANA”very long name “30”
punycode name “自動車整備士ガイド scripts=CJK/KATAKANA”very long name “31”
punycode name “移動式クレーンガイド scripts=CJK/KATAKANA/KATAKANA”very long name “30”
punycode name “永義房屋桃園中路吉安店 scripts=CJK”very long name “39”
Lowxn--friedberg-segmller-manufaktur-ybd.bayernscore 22· boilerplate page
punycode name “friedberg-segmüller-manufaktur scripts=L”very long name “30”
Lowxn--friedberg-segmller-manufaktur-ybd.comscore 22· active website
punycode name “friedberg-segmüller-manufaktur scripts=L”very long name “30”
Lowxn--krakn-9za.comscore 22echoes kraken
punycode name “krakėn scripts=LATIN”ambiguous brand word “kraken”
Lowxn--manufaktur-segmller-friedberg-zbd.bayernscore 22· boilerplate page
punycode name “manufaktur-segmüller-friedberg scripts=L”very long name “30”
punycode name “manufaktur-segmüller-friedberg scripts=L”very long name “30”
punycode name “michaerklärtreformationfürhingschissenek”very long name “45”
punycode name “지엠티카지노주소 scripts=HANGUL”very long name “30”
Lowxn--projetomartiresemissionrios-jic.sitescore 22· active website
punycode name “projetomartiresemissionários scripts=LAT”very long name “28”
punycode name “serviçosdeorganizaçãodefeirascongressose”very long name “54”
punycode name “tarjetadepresentacióndigital scripts=LAT”very long name “28”
punycode name “性的思想軽薄持主 scripts=CJK”very long name “29”
punycode name “贈答品の教科書 scripts=CJK/HIRAGANA”very long name “28”
punycode name “耐震基準の教科書 scripts=CJK/HIRAGANA”very long name “30”
punycode name “帰国子女の塾ガイド scripts=CJK/HIRAGANA/KATAKANA”very long name “29”
punycode name “難関大生の家庭教師 scripts=CJK/HIRAGANA”very long name “35”
Lowyukichat.workscore 22· active website
TLD with a high abuse rate “work”login form “has_form+login words”
Lowzetahub.proscore 22· active website
page impersonates a brand “Coinbase”
Lowzonishop.comscore 22· active website
page impersonates a brand “Netflix”
Low7r4yg201jrxd9wz.icuscore 21· boilerplate page
random-looking name “H=3.77”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
Low0910jasongomez.shopscore 20· active website
brand in page title, not in the name “namecheap”

Same data as JSON: /api/zone/risk?day=2026-10-10&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.