Flagged newborn domains, Tuesday, October 13, 2026

10,606 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowvelora-labs.onlinescore 22· active website
page impersonates a brand “MetaMask”
Lowvetmobile360.comscore 22echoes tmobile
brand in the name “tmobile”brand plus digits “vetmobile360”
Lowviewhop.sitescore 22· active website
page impersonates a brand “netflix”
Lowvikramdryerventchimney.questscore 22· active website
TLD with a high abuse rate “quest”page pushes urgent payment “risk-free”
Lowvinerra.shopscore 22· active website
page impersonates a brand “PayPal”
Lowvirusaave.xyzscore 22echoes usaa· not probed yet
brand in the name “usaa”TLD with a high abuse rate “xyz”
Lowvivida-cuentavesa.sitescore 22· active website
page impersonates a brand “Coinbase”
Lowwaitaudio.xyzscore 22echoes itau· not probed yet
brand in the name “itau”TLD with a high abuse rate “xyz”
Lowwaitaudit.xyzscore 22echoes itau· not probed yet
brand in the name “itau”TLD with a high abuse rate “xyz”
Lowwaypointmoney.appscore 22· active website
page impersonates a brand “Netflix”
Lowwcgservice.topscore 22· robots.txt denied
lure words (login, verify, secure…) “service”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services”many hyphens “4”very long name “30”
Lowwifyapp.comscore 22· active website
page impersonates a brand “Netflix”
Lowwmsxwdcn.orgscore 22· active website
page impersonates a brand “Netflix”
Lowwtxhawks.comscore 22· active website
page impersonates a brand “IRS”
punycode name “คลินิกกายภาพบําบัด scripts=THAI”very long name “31”
punycode name “เสาเข็มไมโครไพล์ scripts=THAI”very long name “29”
Lowxn--2e0bspe6ikpi46cyslyqh5a12c758j.shopscore 22· active website
punycode name “김하림언어발달연구소 scripts=HANGUL”very long name “34”
punycode name “โรงงานไม้แปรรูป scripts=THAI”very long name “28”
punycode name “adanayagidekmidürümcümehmetusta scripts=”very long name “31”
punycode name “associaçãobrincadeirasverdes scripts=LAT”very long name “28”
punycode name “capacitaçãoprofissionaleducacional scrip”very long name “34”
punycode name “電気自動車ガイド scripts=CJK/KATAKANA”very long name “28”
punycode name “escritóriodeadvocaciaednaldogomesvidal s”very long name “38”
punycode name “中西医数字人民币 scripts=CJK”very long name “28”
punycode name “北大荒中央厨房博览园 scripts=CJK”very long name “33”
punycode name “中国奶龙奶蛙大学 scripts=CJK”very long name “28”
punycode name “南通市奶蛙研究所中心 scripts=CJK”very long name “36”
punycode name “ıgdırfiziktedaviverehabilitasyon scripts”very long name “30”
punycode name “개인회생파산전문 scripts=HANGUL”very long name “31”
Lowxn--h49ax9yh9e3mbo9eetge2a79w.sitescore 22· not probed yet
punycode name “조개모아최신주소 scripts=HANGUL”very long name “29”
punycode name “helfende-hand-schlüsselnotdienst scripts”very long name “32”
punycode name “institutfürsprengstoffspürhunde scripts=”very long name “31”
punycode name “경남재가기관협회 scripts=HANGUL”very long name “28”
Lowxn--o39an5bf7h99e8xbv4fn4uzmau54e.onlinescore 22· active website
punycode name “야동코리아바로가기 scripts=HANGUL”very long name “33”
punycode name “프라다카지노주소 scripts=HANGUL”very long name “29”
punycode name “진양하씨판윤공파종회 scripts=HANGUL”very long name “37”
punycode name “충남장기요양신문 scripts=HANGUL”very long name “29”
Lowxn--om2b23aka482g74fq0sc0deqc.comscore 22· robots.txt denied
punycode name “혜린플레이리스트 scripts=HANGUL”very long name “29”
punycode name “schlummerlandschönbornricoschmausblasorc”very long name “46”
punycode name “schlummerlandschönbornricoschmausblasorc”very long name “46”
punycode name “schlummerlandschönbornricoschmausblasorc”very long name “46”
punycode name “tabeladepreçosparaconsertosderoupas scri”very long name “35”
punycode name “練習用のホームページ scripts=CJK/HIRAGANA/KATAKANA”very long name “28”
Lowyinruishu.comscore 22· active website
page impersonates a brand “DHL”
Lowymrworldwide.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowzanimex.clickscore 22· active website
TLD with a high abuse rate “click”login form “has_form+login words”
Lowzhuluoze.topscore 22echoes hulu· empty page
brand in the name “hulu”TLD with a high abuse rate “top”
Lowzilamor.comscore 22· active website
page impersonates a brand “PayPal”
Low2fxmdqhurjzgvtd.icuscore 21· redirects elsewhere
random-looking name “H=3.77”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-10-13&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.