Flagged newborn domains, Monday, October 19, 2026

6,937 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumxn--ztt904d.topscore 26· no DNS
punycode name “穎帝 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--ztto51k.topscore 26· boilerplate page
punycode name “颖帝 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--zttp03d.topscore 26· boilerplate page
punycode name “科帝 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--zttu56k.topscore 26· not probed yet
punycode name “高帝 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--zttw1o.topscore 26· boilerplate page
punycode name “斩帝 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--zvtz05b.topscore 26· no DNS
punycode name “爆幣 scripts=CJK”TLD with a high abuse rate “top”
Mediumytsub2unlock.sitescore 26· active website
lure words (login, verify, secure…) “unlock”brand in page title, not in the name “whatsapp”
nameserver domain born the same day “meyarforvaluation.com”
Mediumbaisouq.comscore 25· no DNS
nameserver domain born the same day “davari.company”
Mediumfyndme-mapsmx-satelite.helpscore 25· robots.txt denied
nameserver domain born the same day “idmsarecording.pro”
Mediumhfgvsvxhmpai7r4ugg.livescore 25· blocked the probe
random-looking name “H=3.68”brand in page title, not in the name “cloudflare”
Mediumsorena.companyscore 25· no DNS
nameserver domain born the same day “davari.company”
Mediumsorenasmart.comscore 25· no DNS
nameserver domain born the same day “davari.company”
Lowbestratedcasinosnotongamstop.comscore 24· blocked the probe
very long name “28”brand in page title, not in the name “cloudflare”
Lowel-evri-app.comscore 24echoes evri· blocked the probe
ambiguous brand word “evri”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
very long name “59”brand in page title, not in the name “gmail”
Lowfretintuition.comscore 24echoes intuit· registrar placeholder
brand in the name “intuit”identical page on many newborns “441 identical pages”
Lowfskdigitalmarketingbangalore.comscore 24· registrar placeholder
very long name “28”brand in page title, not in the name “hostinger”
lure words (login, verify, secure…) “update”many hyphens “4”very long name “31”TLD with a high abuse rate “beauty”
lure words (login, verify, secure…) “secure”many hyphens “4”very long name “28”TLD with a high abuse rate “beauty”
Lowmoprevolution.latscore 24echoes revolut· registrar placeholder
brand in the name “revolut”identical page on many newborns “2678 identical pages”
lure words (login, verify, secure…) “service,services”very long name “31”free DNS provider “dnsowl.com”
Lowpropietarioslomasresidencialac.orgscore 24· active website
very long name “30”brand in page title, not in the name “namecheap”
Lowrebeccaosbergscountrykitchen.orgscore 24· active website
very long name “28”brand in page title, not in the name “namecheap”
Lowsafeguard-kraken.comscore 24echoes kraken· no web server
ambiguous brand word “kraken”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
lure words (login, verify, secure…) “security,verified”very long name “30”TLD with a high abuse rate “autos”
Lowstreetsyndicate.gamesscore 24echoes etsy· registrar placeholder
brand in the name “etsy”identical page on many newborns “2678 identical pages”
Lowstreetsyndicate.worldscore 24echoes etsy· registrar placeholder
brand in the name “etsy”identical page on many newborns “2678 identical pages”
Lowthevanguardtrail.shopscore 24echoes vanguard· registrar placeholder
brand in the name “vanguard”identical page on many newborns “2678 identical pages”
very long name “30”brand in page title, not in the name “cloudflare”
punycode name “krusegebäudeservice scripts=LATIN”lure words (login, verify, secure…) “service”
Lowxn--krusegebudeservice-stb.infoscore 24· registrar placeholder
punycode name “krusegebäudeservice scripts=LATIN”lure words (login, verify, secure…) “service”
Lowxn--krusegebudeservice-stb.storescore 24· registrar placeholder
punycode name “krusegebäudeservice scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “평생맛집 scripts=HANGUL”random-looking name “H=3.64”
punycode name “맛집평생주소 scripts=HANGUL”random-looking name “H=3.88”
punycode name “ขัดกระปู๋ scripts=THAI”random-looking name “H=3.72”
punycode name “北京市奶龙学校 scripts=CJK”random-looking name “H=4.08”
punycode name “เว็บหวยเลขสยาม scripts=THAI”random-looking name “H=3.86”
punycode name “다산휴대폰성지 scripts=HANGUL”random-looking name “H=3.97”
punycode name “원주키움부동산 scripts=HANGUL”random-looking name “H=4.06”
punycode name “매일부동산 scripts=HANGUL”random-looking name “H=4.06”
punycode name “케이메디 scripts=HANGUL”random-looking name “H=3.64”
punycode name “케이메디의원 scripts=HANGUL”random-looking name “H=4.20”
punycode name “배달닥터 scripts=HANGUL”random-looking name “H=3.64”
punycode name “센트럴의원 scripts=HANGUL”random-looking name “H=3.83”
punycode name “황제맞춤 scripts=HANGUL”random-looking name “H=3.77”
punycode name “โป๊มั้ยคับ scripts=THAI”random-looking name “H=3.68”
punycode name “ริมผาแคมป์ปิ้ง scripts=THAI”random-looking name “H=4.02”
punycode name “น้องใหม่มมส scripts=THAI”random-looking name “H=3.82”
punycode name “ภาพติดผนัง scripts=THAI”random-looking name “H=3.64”

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.