Flagged newborn domains, Tuesday, October 13, 2026

2,467 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumxn--gmq502ar4bm7bu5l8ukk4n.topscore 31· no DNS
punycode name “心理数字人民币 scripts=CJK”random-looking name “H=4.00”TLD with a high abuse rate “top”
Mediumxn--gmq502ar4botlrsidnmhuc.topscore 31· no DNS
punycode name “理疗数字人民币 scripts=CJK”random-looking name “H=4.33”TLD with a high abuse rate “top”
Mediumxn--gmq87hu4i8xc15m83j4y0d.topscore 31· no DNS
punycode name “豆包数字人民币 scripts=CJK”random-looking name “H=4.14”TLD with a high abuse rate “top”
Mediumxn--gmq87hu4ig9c61lvjk4y0d.topscore 31· no DNS
punycode name “豆包數字人民幣 scripts=CJK”random-looking name “H=4.42”TLD with a high abuse rate “top”
Mediumxn--gmq94wiyb83d5zac90aqul.topscore 31· no DNS
punycode name “康复数字人民币 scripts=CJK”random-looking name “H=4.33”TLD with a high abuse rate “top”
Mediumxn--gmq94wiybgze5lv84a4sl.topscore 31· no DNS
punycode name “康复數字人民幣 scripts=CJK”random-looking name “H=4.14”TLD with a high abuse rate “top”
Mediumxn--gmqx0emvn8vc15m83jy88a.topscore 31· no DNS
punycode name “养老数字人民币 scripts=CJK”random-looking name “H=3.80”TLD with a high abuse rate “top”
Mediumxn--kkrv96l5zbusc.topscore 31· no DNS
punycode name “金陵十钗 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--psszg50dn2ak28apn3f.topscore 31· no DNS
punycode name “山東奶龍大學 scripts=CJK”random-looking name “H=3.78”TLD with a high abuse rate “top”
Mediumxn--psszg58cv3fe07bpy1c.icuscore 31· no DNS
punycode name “福建奶龙大学 scripts=CJK”random-looking name “H=4.11”TLD with a high abuse rate “icu”
Mediumxn--rhq553afkuumb.icuscore 31· empty page
punycode name “世界盒子 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “icu”
Mediumxn--rhqr3y0gn7er08cj9v.icuscore 31· redirects elsewhere
punycode name “世界奶蛙大學 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “icu”
Mediumxn--rhqr3y0gn7er08cn86c.topscore 31· no DNS
punycode name “世界奶龍大學 scripts=CJK”random-looking name “H=3.65”TLD with a high abuse rate “top”
Mediumxn--rhqr3y0gz4ec38cpb7c.topscore 31· no DNS
punycode name “世界奶龙大学 scripts=CJK”random-looking name “H=3.98”TLD with a high abuse rate “top”
Mediumxn--rhqsej8401b.topscore 31· no DNS
punycode name “世界义乌 scripts=CJK”random-looking name “H=3.70”TLD with a high abuse rate “top”
Mediumxn--vcs70dm67g41h.xyzscore 31· not probed yet
punycode name “奶龙国际 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Mediumxn--vhq58fkulgx9c.topscore 31· no DNS
punycode name “都宏农业 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--xhq02y0gz4ebvbj98t.topscore 31· redirects elsewhere
punycode name “山东奶龙大学 scripts=CJK”random-looking name “H=4.02”TLD with a high abuse rate “top”
Mediumxn--xhq02ykwbp4ab82m04k.icuscore 31· not probed yet
punycode name “山东路障大学 scripts=CJK”random-looking name “H=3.82”TLD with a high abuse rate “icu”
Mediumxn--z4qq0pw1ap97b.workscore 31· no DNS
punycode name “欧姆元境 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “work”
Medium315swpu.topscore 30· active website
TLD with a high abuse rate “top”page impersonates a brand “BINANCE”
Medium9k-club.gamesscore 30· active website
page asks for credentials “login to your account”
Mediumaftercurrent.winscore 30· active website
TLD with a high abuse rate “win”page impersonates a brand “MetaMask”
Mediumakl-investment.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumalel.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumami-assurances.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
many hyphens “6”very long name “48”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “40”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “37”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “44”brand in page title, not in the name “cloudflare”
Mediumarcadialab.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “MetaMask”
Mediumavi-prime.onlinescore 30· active website
page asks for credentials “log in to your account”
Mediumbasaltridgebay.shopscore 30echoes ebay· empty page
brand in the name “ebay”
Mediumbatalhadoarcade.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumblocktown.funscore 30· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”
Mediumbright-buy.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumbrightcartfinds.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumbrycelee.xyzscore 30· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Coinbase”
Mediumbs4it.techscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumbudget2026.cloudscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumbuyattention.funscore 30· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”
Mediumcaufemcip.orgscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumcekgocek.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumcharaf.artscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumclayart.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumclickdeideas.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumcodalio.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumcompanyonpump.funscore 30· active website
TLD with a high abuse rate “fun”page impersonates a brand “Binance”
Mediumcompushop.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumcontatos.techscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”

Same data as JSON: /api/zone/risk?day=2026-10-13&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.