Flagged newborn domains, Monday, October 19, 2026

2,213 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumxn--910b55ovxf7tg.questscore 31· empty page
punycode name “나우리사 scripts=HANGUL”random-looking name “H=3.64”TLD with a high abuse rate “quest”
Mediumxn--9krsk37fp10h.topscore 31· not probed yet
punycode name “博发国际 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “top”
Mediumxn--gmq262b9lnoze.topscore 31· no DNS
punycode name “煩人的微 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--h9tq38e0sgzzj.topscore 31· boilerplate page
punycode name “豪门苏总 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--jvryly8d8y3co01a.topscore 31· no DNS
punycode name “農產品商城 scripts=CJK”random-looking name “H=3.79”TLD with a high abuse rate “top”
Mediumxn--kbtq9uxvbr6p34uvvnwvc.icuscore 31· active website
punycode name “超自然官方查询 scripts=CJK”random-looking name “H=3.83”TLD with a high abuse rate “icu”
Mediumxn--mcxp4en56azvi.topscore 31· not probed yet
punycode name “豪门爱满 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--pbt3jq49jz6h.topscore 31· boilerplate page
punycode name “豪门小宝 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “top”
Mediumxn--pbt3jt97dk12a.topscore 31· boilerplate page
punycode name “铁甲小宝 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--pss465b0qx3uh.topscore 31· no DNS
punycode name “豪門大水 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--pss82dr61b5hu.topscore 31· no DNS
punycode name “大家發財 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--pss90ek8u3od.topscore 31· no DNS
punycode name “小濤大水 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “top”
Mediumxn--psstvl5ai94d.topscore 31· no web server
punycode name “男娘大学 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “top”
Mediumxn--vqq032alpb678d.topscore 31· boilerplate page
punycode name “小何老师 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “top”
Mediumxn--vqq032alsb638d.topscore 31· no DNS
punycode name “小何老師 scripts=CJK”random-looking name “H=3.75”TLD with a high abuse rate “top”
Mediumxn--wlqw5ebvdhpi5h.topscore 31· boilerplate page
punycode name “农产品商城 scripts=CJK”random-looking name “H=3.62”TLD with a high abuse rate “top”
Mediumxn--wmq198bm2ctp9apug.topscore 31· not probed yet
punycode name “今晚打老虎 scripts=CJK”random-looking name “H=3.93”TLD with a high abuse rate “top”
Mediumxn--y5qq4dywr1o3a.topscore 31· no DNS
punycode name “必紅入口 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--yfrp5enpj81a6w4d.topscore 31· boilerplate page
punycode name “快喵加速器 scripts=CJK”random-looking name “H=3.95”TLD with a high abuse rate “top”
Mediumxn--yfrw1gx2kh5t586a.topscore 31· boilerplate page
punycode name “快猫加速器 scripts=CJK”random-looking name “H=3.95”TLD with a high abuse rate “top”
Mediumxn--yfrw1gx2kss0c0yd.topscore 31· active website
punycode name “快貓加速器 scripts=CJK”random-looking name “H=3.73”TLD with a high abuse rate “top”
Mediumxn--z4qwgo84d3x5a.topscore 31· not probed yet
punycode name “有元再见 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--z4qwgo84dxr5a.topscore 31· no DNS
punycode name “有元再見 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Medium96110.cyouscore 30· active website
TLD with a high abuse rate “cyou”page impersonates a brand “Netflix”
Mediumaamir.cloudscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumaksespuma303.onlinescore 30· active website
page asks for credentials “Login to your Account”
Mediumallmanage.onlinescore 30· active website
page asks for credentials “Log in to your account”
many hyphens “4”very long name “42”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “37”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “42”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “38”brand in page title, not in the name “cloudflare”
many hyphens “4”very long name “42”brand in page title, not in the name “cloudflare”
Mediumascendvials.appscore 30· active website
page asks for credentials “Log in to your account”
Mediumbecas360.onlinescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumbestshopoficial.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumbetsyjovon.shopscore 30echoes etsy· boilerplate page
brand in the name “etsy”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “1384 identical pages”
Mediumblockboomsolana.funscore 30· active website
TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”
Mediumbookon.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumboostam.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumcardsakura.cyouscore 30· active website
TLD with a high abuse rate “cyou”page impersonates a brand “Apple ID”
Mediumcarousti.storescore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumchartlogic.proscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumdailyfilm.cyouscore 30· active website
TLD with a high abuse rate “cyou”page impersonates a brand “Netflix”
Mediumdekhosikho.guruscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumdollarbreak.topscore 30· active website
TLD with a high abuse rate “top”page impersonates a brand “PayPal”
Mediumelevora.proscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumemojitreasurehunt.comscore 30· active website
page asks for credentials “Login to your account”
Mediumemperadorsabonetes.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumemperiodosabao.shopscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
Mediumermaocloud.homesscore 30· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.