Flagged newborn domains, Thursday, October 15, 2026

10,773 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowxn--ydsw06g.comscore 18· no DNS
punycode name “圣翔 scripts=CJK”
Lowxn--yet000a.vipscore 18· active website
punycode name “小桦 scripts=CJK”
Lowxn--yfr25x.xn--vhquvscore 18· no DNS
punycode name “加工 scripts=CJK”
Lowxn--ylvx8j.comscore 18
punycode name “水暖 scripts=CJK”
Lowxn--yny203b.xn--vhquvscore 18· no DNS
punycode name “男装 scripts=CJK”
Lowxn--yu-eja.shopscore 18· active website
punycode name “yêu scripts=LATIN”
Lowxn--yucatn-tta.cityscore 18· no DNS
punycode name “yucatán scripts=LATIN”
punycode name “奶龙编程 scripts=CJK”
Lowxn--yus254n.collegescore 18· redirects elsewhere
punycode name “奶龙 scripts=CJK”
Lowxn--yus254n.netscore 18
punycode name “奶龙 scripts=CJK”
Lowxn--yus254n.sitescore 18· no DNS
punycode name “奶龙 scripts=CJK”
Lowxn--yus296h.spacescore 18· active website
punycode name “奶蛙 scripts=CJK”
punycode name “奶龙师范 scripts=CJK”
punycode name “奶龙研究院 scripts=CJK”
punycode name “野生狗奶 scripts=CJK”
punycode name “奶龙奶蛙 scripts=CJK”
punycode name “奶龙职院 scripts=CJK”
Lowxn--yussm.comscore 18
punycode name “奶娃 scripts=CJK”
punycode name “泰山奶龙学院 scripts=CJK”
Lowxn--yusy8bk09b09yw7fk0o.comscore 18· no DNS
punycode name “奶龙邮电学院 scripts=CJK”
Lowxn--yusy8bn31ft8m.sitescore 18· boilerplate page
punycode name “奶蛙学院 scripts=CJK”
punycode name “福建奶龙学院 scripts=CJK”
Lowxn--yusy8bqoh57s.onlinescore 18· redirects elsewhere
punycode name “奶龙小学 scripts=CJK”
Lowxn--yusy8bu4trp1ac2ukim.onlinescore 18· redirects elsewhere
punycode name “奶龙艺术学院 scripts=CJK”
Lowxn--z4q459g.comscore 18
punycode name “福元 scripts=CJK”
Lowxn--z6qp88g.comscore 18
punycode name “禄冉 scripts=CJK”
Lowxn--z7x16bf6t.orgscore 18· active website
punycode name “自由猫 scripts=CJK”
punycode name “zakazanemyšlenky scripts=LATIN”
Lowxn--zakazanemylenky-f7c.onlinescore 18· active website
punycode name “zakazanemyšlenky scripts=LATIN”
Lowxn--zca-bma.comscore 18
punycode name “zéca scripts=LATIN”
Lowxn--zfr188b.xn--vhquvscore 18· no DNS
punycode name “服务 scripts=CJK”
punycode name “özköseotomotivhasar scripts=LATIN”
punycode name “zöldsziget scripts=LATIN”
Lowxn--zmir-4qa.comscore 18
punycode name “özmir scripts=LATIN”
Lowxn--zqvrq.xn--vhquvscore 18· no DNS
punycode name “标杆 scripts=CJK”
many hyphens “4”very long name “57”TLD with a high abuse rate “click”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
Low1s0s1m9a2r8t3o7n4e6sbs5com0io.sbsscore 17· robots.txt denied
very long name “29”random-looking name “H=4.21”TLD with a high abuse rate “sbs”
lure words (login, verify, secure…) “payment,payments”random-looking name “H=3.70”
very long name “44”random-looking name “H=4.71”TLD with a high abuse rate “fun”
very long name “35”random-looking name “H=4.06”TLD with a high abuse rate “click”
very long name “57”random-looking name “H=3.83”TLD with a high abuse rate “click”
very long name “35”random-looking name “H=4.31”TLD with a high abuse rate “cyou”
very long name “44”random-looking name “H=4.56”TLD with a high abuse rate “fun”
Lowdhl3xpresstracking.infoscore 17· boilerplate page
lure words (login, verify, secure…) “track,tracking”random-looking name “H=3.95”
very long name “32”random-looking name “H=3.90”TLD with a high abuse rate “cyou”
very long name “44”random-looking name “H=4.35”TLD with a high abuse rate “fun”
very long name “57”random-looking name “H=3.89”TLD with a high abuse rate “click”
very long name “44”random-looking name “H=4.42”TLD with a high abuse rate “fun”
very long name “57”random-looking name “H=3.71”TLD with a high abuse rate “click”

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.