Flagged newborn domains, Thursday, October 15, 2026

55 names at tier low or above in .vip, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highai-pay.vipscore 55echoes alipay· boilerplate page
one-letter brand typo “aipay≈alipay”lure words (login, verify, secure…) “pay”brand name on a rarely-seen nameserver “cscdns.net”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highusamazonshop.vipscore 46echoes amazon· boilerplate page
brand in the name “amazon”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more

Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.

Highhaobao.vipscore 42echoes taobao· empty page
one-letter brand typo “haobao≈taobao”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Mediumajhkasdjh.vipscore 38· blocked the probe
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumwhatiiaapp.vipscore 28· redirects elsewhere
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumwhattapsg.vipscore 28· redirects elsewhere
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
Mediumwhattpp.vipscore 28· redirects elsewhere
free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”
punycode name “广州荔序电子商务有限公司 scripts=CJK”very long name “43”random-looking name “H=3.94”
Lowofertablackdocavaquinhovitalicio.vipscore 24· active website
very long name “32”brand in page title, not in the name “whatsapp”
Lowxn--qoq766o.vipscore 24· active website
punycode name “雷伊 scripts=CJK”form submits over plain HTTP “http://xn--qoq766o.vip/”
Lowxn--djr21mstb95swk5dmtl.vipscore 23· active website
punycode name “北方奶龙学院 scripts=CJK”random-looking name “H=3.92”
Lowxn--kbt14a26qk45d.vipscore 23· boilerplate page
punycode name “鼎峰官方 scripts=CJK”random-looking name “H=3.64”
Lowxn--kbt14ao86ers0a.vipscore 23· not probed yet
punycode name “鼎峰官网 scripts=CJK”random-looking name “H=3.88”
Lowxn--kpr52sg7ae57l.vipscore 23· not probed yet
punycode name “鼎峰平台 scripts=CJK”random-looking name “H=3.64”
Lowxn--psszg58cc7rpqj3x0f.vipscore 23· server error
punycode name “奶龙政法大学 scripts=CJK”random-looking name “H=3.92”
Lowxn--psszg58ccj875iqr5c.vipscore 23· active website
punycode name “皇家奶龙大学 scripts=CJK”random-looking name “H=3.65”
Lowxn--vcs128buo5adca.vipscore 23· boilerplate page
punycode name “欧阳国际 scripts=CJK”random-looking name “H=3.75”
Lowxn--vcsz77j62cluf.vipscore 23· not probed yet
punycode name “赏金国际 scripts=CJK”random-looking name “H=3.64”
Lowdtcheck.vipscore 22· active website
page impersonates a brand “MetaMask”
Lownewserials.vipscore 22· active website
page impersonates a brand “Amazon Prime”
Lowbets360v.vipscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowblockchain-life.vipscore 20· active website
brand in page title, not in the name “namecheap”
Lowcalon4demas.vipscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowfinnheyken.vipscore 20· active website
brand in page title, not in the name “telegram”
Lowlamorindasteaknight.vipscore 20· redirects elsewhere
brand in page title, not in the name “google”
Lowlm13.vipscore 20· empty page
brand in page title, not in the name “cloudflare”
Lowmarsbahs-tr.vipscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowmarsbahsgrs.vipscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowmimina.vipscore 20· active website
brand in page title, not in the name “whatsapp”
Lowofertaadeuscremerosa.vipscore 20· active website
brand in page title, not in the name “tiktok”
Lowovercard.vipscore 20· active website
brand in page title, not in the name “telegram”
Lowpaperhands.vipscore 20· active website
brand in page title, not in the name “robinhood”
Lowpixiehd.vipscore 20· active website
brand in page title, not in the name “robinhood”
Lowsatans.vipscore 20· active website
brand in page title, not in the name “telegram”
Lowstevebayu.vipscore 20echoes ebay· active website
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”
Lowzeusmedia.vipscore 20· active website
brand in page title, not in the name “apple”
Lowxn--28-m71d113v.vipscore 18· boilerplate page
punycode name “鼎峰28 scripts=CJK”
Lowxn--5rvw3zw5t.vipscore 18· boilerplate page
punycode name “足球杯 scripts=CJK”
Lowxn--88-fy2di70o.vipscore 18· redirects elsewhere
punycode name “帝豪88 scripts=CJK”
Lowxn--eltp25m.vipscore 18· boilerplate page
punycode name “鼎峰 scripts=CJK”
Lowxn--fhq9fw46axmj.vipscore 18· boilerplate page
punycode name “掌上娱乐 scripts=CJK”
Lowxn--fhqsm505chw2c.vipscore 18· boilerplate page
punycode name “掌上风云 scripts=CJK”
Lowxn--fiqs8srwb9iv6f6w9n.vipscore 18· not probed yet
punycode name “中国奶龙大学 scripts=CJK”
Lowxn--fiqx8ytpbj45k.vipscore 18· no DNS
punycode name “奶龙中学 scripts=CJK”
Lowxn--fjq720ai7bn00i.vipscore 18· boilerplate page
punycode name “鼎峰娱乐 scripts=CJK”
Lowxn--irr88iruek80a.vipscore 18· no DNS
punycode name “吴王夫差 scripts=CJK”
Lowxn--jor27evus790c.vipscore 18· boilerplate page
punycode name “无双国际 scripts=CJK”
Lowxn--jzu617chuegwo.vipscore 18· empty page
punycode name “精选推荐 scripts=CJK”
Lowxn--k8-7b5cl5e.vipscore 18· boilerplate page
punycode name “k8凯发 scripts=CJK/LATIN”
Lowxn--p-kf0b.vipscore 18· boilerplate page
punycode name “p图 scripts=CJK/LATIN”

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.