Flagged newborn domains, Thursday, October 15, 2026

10,773 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowvodsvp2.topscore 22· boilerplate page
TLD with a high abuse rate “top”login form “has_form+login words”
Lowvodsvp4.topscore 22· boilerplate page
TLD with a high abuse rate “top”login form “has_form+login words”
Lowvodvp1.topscore 22· boilerplate page
TLD with a high abuse rate “top”login form “has_form+login words”
Lowvodvp2.topscore 22· boilerplate page
TLD with a high abuse rate “top”login form “has_form+login words”
Lowvodvp3.topscore 22· boilerplate page
TLD with a high abuse rate “top”login form “has_form+login words”
Lowvodvp5.topscore 22· boilerplate page
TLD with a high abuse rate “top”login form “has_form+login words”
Lowvoirserie.watchscore 22· active website
page impersonates a brand “Netflix”
Lowvoltick.shopscore 22· active website
page impersonates a brand “PayPal”
Lowwallet-pi.topscore 22· no DNS
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Lowweblivestream.topscore 22· active website
TLD with a high abuse rate “top”login form “has_form+login words”
Lowwidebay3dprints.comscore 22echoes ebay
brand in the name “ebay”brand plus digits “widebay3dprints”
lure words (login, verify, secure…) “service,services”many hyphens “3”very long name “32”
Lowworkin.designscore 22· active website
page impersonates a brand “Coinbase”
punycode name “บ้านสนุกเกอร์ scripts=THAI”very long name “28”
punycode name “เดอะทับแขกกระบี่ scripts=THAI”very long name “30”
punycode name “รับทํากําแพงรั้วเขื่อนกันดิน scripts=THA”very long name “47”
Lowxn--2e0bspr8jf5f30lf3c123actm.shopscore 22· active website
punycode name “김해구산롯데캐슬 scripts=HANGUL”very long name “29”
punycode name “美利坚合众国奶龙大学 scripts=CJK”very long name “34”
punycode name “美利坚合众国奶蛙大学 scripts=CJK”very long name “33”
punycode name “нелумбоавтоматизация scripts=CYRILLIC”very long name “29”
Lowxn--80aaabgpshcwldgsc7ddi4e2j.sitescore 22· robots.txt denied
punycode name “нелумбоавтоматизация scripts=CYRILLIC”very long name “29”
Lowxn--80aaabgpshcwldgsc7ddi4e2j.storescore 22· robots.txt denied
punycode name “нелумбоавтоматизация scripts=CYRILLIC”very long name “29”
Lowxn--80aaabgpshcwldgsc7ddi4e2j.techscore 22· robots.txt denied
punycode name “нелумбоавтоматизация scripts=CYRILLIC”very long name “29”
punycode name “선한이웃커뮤니티 scripts=HANGUL”very long name “30”
punycode name “benbirberberesiteoluşturmakistiyorum scr”very long name “36”
punycode name “cámaradecomercionórdico-colombiana scrip”very long name “34”
punycode name “北奶香港奶龙大学联合奶龙学院 scripts=CJK”very long name “43”
Lowxn--fiq21itzfrtdseo99fp10ac9y.gayscore 22· blocked the probe
punycode name “觀塘功樂官立中學 scripts=CJK”very long name “29”
punycode name “中国四川金钗石斛 scripts=CJK”very long name “30”
punycode name “中国妇产科临床杂志 scripts=CJK”very long name “30”
punycode name “国立中央奶龙大学 scripts=CJK”very long name “29”
punycode name “中国绿松石供应商 scripts=CJK”very long name “29”
punycode name “中国香港奶龙大学 scripts=CJK”very long name “29”
Lowxn--fiqv3t3qb8iw6fq4x41nqw7g.onlinescore 22· no web server
punycode name “奶龙中文大学深圳 scripts=CJK”very long name “28”
punycode name “奶龙附中深圳学校 scripts=CJK”very long name “30”
punycode name “中纺公司有限集团 scripts=CJK”very long name “31”
punycode name “中纺公司有限集团 scripts=CJK”very long name “31”
punycode name “中纺公司有限集团 scripts=CJK”very long name “31”
punycode name “gölbaşıkaracapınarveterinerkliniği scrip”very long name “32”
punycode name “hammaslääkäriasemahelmiäinen scripts=LAT”very long name “28”
Lowxn--horadorangolancheserefeies-fkc60b.shopscore 22· redirects elsewhere
punycode name “horadorangolancheserefeições scripts=LAT”very long name “28”
punycode name “مؤسسةأمجدسالمخزيمالعنزيالتج scripts=ARAB”very long name “38”
punycode name “国立奶龙专科学院 scripts=CJK”very long name “30”
Lowyp1t.funscore 22· active website
TLD with a high abuse rate “fun”login form “has_form+login words”
Lowzivqelxunar.digitalscore 22· active website
page impersonates a brand “Paypal”
Low118218.orgscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low21cinema.infoscore 20· active website
brand in page title, not in the name “wordpress”
Low263commerce.agencyscore 20· redirects elsewhere
brand in page title, not in the name “shopify”
Low263commerce.comscore 20· redirects elsewhere
brand in page title, not in the name “shopify”
Low2betjos1.livescore 20· blocked the probe
brand in page title, not in the name “cloudflare”

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.