Flagged newborn domains, Friday, October 16, 2026

16,690 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowtheportraitatelier.shopscore 22· active website
page impersonates a brand “PayPal”
Lowthestarsandstripes250th.comscore 22echoes stripe
brand in the name “stripe”brand plus digits “thestarsandstripes250th”
Lowtiedtogether-spacecoast.orgscore 22· active website
page impersonates a brand “IRS”
Lowtiptoeinmyjordans.proscore 22· active website
page impersonates a brand “PayPal”
Lowtoastedbinder.comscore 22· active website
page impersonates a brand “USPS”
Lowtokeslot88.funscore 22· active website
TLD with a high abuse rate “fun”login form “has_form+login words”
Lowtraderspacedaily.comscore 22· active website
page impersonates a brand “Bank of America”
Lowtucielo.shopscore 22· active website
page impersonates a brand “PayPal”
Lowtyinvites.topscore 22· active website
TLD with a high abuse rate “top”login form “has_form+login words”
Lowu-tel.icuscore 22· active website
TLD with a high abuse rate “icu”login form “has_form+login words”
Lowvalorparkcoventry170.comscore 22· active website
page impersonates a brand “DHL”
Lowwetravelslimited.topscore 22· active website
lure words (login, verify, secure…) “limited”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “service,services,signin”very long name “32”
Lowwrs-lawyers.netscore 22· active website
page impersonates a brand “HMRC”
Lowwstats.cyouscore 22· active website
TLD with a high abuse rate “cyou”login form “has_form+login words”
Lowwuwuhaha8899.shopscore 22· active website
page impersonates a brand “paypal”
Lowx-appleid.comscore 22· active website
page impersonates a brand “Apple ID”
Lowx500.camscore 22· empty page
TLD with a high abuse rate “cam”login form “has_form+login words”
punycode name “รับซื้อของเก่าทุกชนิด scripts=THAI”very long name “39”
punycode name “ตํานานลาบตําครกแตก scripts=THAI”very long name “30”
punycode name “인천외국어고등학교총동문회 scripts=HANGUL”very long name “44”
punycode name “전국중고오토바이매입 scripts=HANGUL”very long name “35”
punycode name “바로여기중고차수출 scripts=HANGUL”very long name “31”
punycode name “하우트맨즈헤어압구정점 scripts=HANGUL”very long name “38”
punycode name “คลิปหลุดคนเด็ด scripts=THAI”very long name “28”
punycode name “คลิปหลุดโคตรเด็ด scripts=THAI”very long name “31”
punycode name “คลิปหลุดโคตรดี scripts=THAI”very long name “28”
punycode name “คลิปหลุดโคตรเสียว scripts=THAI”very long name “32”
punycode name “คลิปหลุดโคตรมันส์ scripts=THAI”very long name “31”
punycode name “คลิปหลุดเสียวจัด scripts=THAI”very long name “30”
punycode name “รถสไลด์มีนบุรีคาร์เซอร์วิส scripts=THAI”very long name “43”
punycode name “彩库宝典怎么安装 scripts=CJK”very long name “28”
punycode name “香港马会开奖记录 scripts=CJK”very long name “29”
punycode name “香港马会开奖结果 scripts=CJK”very long name “29”
punycode name “แทงบอลเต็งออนไลน์ scripts=THAI”very long name “30”
punycode name “รถตู้เช่าเพื่อนเดินทางเชียงราย scripts=T”very long name “47”
Lowxn--80aaaabg8ah5alhgbcgngo0ak6b.onlinescore 22· robots.txt denied
punycode name “роботизованаплатформа scripts=CYRILLIC”very long name “31”
Lowxn--939a34b4yrhxm8lelosb2ac6c.shopscore 22· active website
punycode name “김포한강푸르지오 scripts=HANGUL”very long name “29”
punycode name “asociacióndetrabajadoresdelahosteleríaen”very long name “48”
punycode name “북오산자이모델하우스 scripts=HANGUL”very long name “35”
punycode name “demestrecouvertureetrénovation scripts=L”very long name “30”
punycode name “denizhanyangınsöndürmesistemleri scripts”very long name “31”
punycode name “中国奶龙医科大学 scripts=CJK”very long name “29”
Lowxn--fiqr8sj3b25chwhdr6b9qd877g.worldscore 22· redirects elsewhere
punycode name “国家奶龙研究中心 scripts=CJK”very long name “30”
Lowxn--fiqs8srwb9ia190asy4ijnyb.comscore 22· redirects elsewhere
punycode name “中国奶蛙奶龙大学 scripts=CJK”very long name “28”
punycode name “中国奶龙师范大学 scripts=CJK”very long name “29”
punycode name “中国乡村振兴经济 scripts=CJK”very long name “28”
Lowxn--fundacinjuanantoniogonzalezmoreno-6gd.comscore 22· robots.txt denied
punycode name “fundaciónjuanantoniogonzalezmoreno scrip”very long name “34”
punycode name “fundaciónjuanfeliperamirezgarcia scripts”very long name “32”
punycode name “fundaciónpediátricaguatemalteca scripts=”very long name “31”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.