Flagged newborn domains, Monday, October 19, 2026

6,937 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “신용회복 scripts=HANGUL”random-looking name “H=3.64”
Lowxn--psszg58cb73ap6a0z9g.onlinescore 23· no DNS
punycode name “武汉奶蛙大学 scripts=CJK”random-looking name “H=3.92”
punycode name “达州奶龙大学 scripts=CJK”random-looking name “H=3.78”
punycode name “체납소멸 scripts=HANGUL”random-looking name “H=3.77”
punycode name “英会話えらび scripts=CJK/HIRAGANA”random-looking name “H=3.92”
punycode name “育毛剤えらび scripts=CJK/HIRAGANA”random-looking name “H=3.78”
punycode name “楽器買取えらび scripts=CJK/HIRAGANA”random-looking name “H=4.05”
punycode name “红网卫士 scripts=CJK”random-looking name “H=3.64”
punycode name “차키분실출장 scripts=HANGUL”random-looking name “H=3.88”
Lowxn--sxrq5o66og1au8m.comscore 23· no DNS
punycode name “唐山港物流 scripts=CJK”random-looking name “H=3.73”
punycode name “밍키넷평생주소 scripts=HANGUL”random-looking name “H=4.08”
punycode name “おもちゃ買取ガイド scripts=CJK/HIRAGANA/KATAKANA”random-looking name “H=3.97”
punycode name “家族とお出かけ scripts=CJK/HIRAGANA”random-looking name “H=4.14”
punycode name “安徽国能电力 scripts=CJK”random-looking name “H=3.92”
Lowxn--tl3b59e9tb5wfopbj39b.netscore 23· no DNS
punycode name “평생원엑스벳 scripts=HANGUL”random-looking name “H=3.61”
punycode name “원엑스벳평생 scripts=HANGUL”random-looking name “H=3.73”
punycode name “원엑스벳주소 scripts=HANGUL”random-looking name “H=4.01”
Lowxn--v52b19jh8ekzb.infoscore 23· active website
punycode name “주소모음 scripts=HANGUL”random-looking name “H=3.77”
punycode name “울산포장이사 scripts=HANGUL”random-looking name “H=3.72”
punycode name “产业经济 scripts=CJK”random-looking name “H=3.81”
Lowxn--vhq524agtdnp2b.xn--3ds443gscore 23· no DNS
punycode name “恒纸实业 scripts=CJK”random-looking name “H=3.75”
Lowxn--vhq524agtduu5a.xn--3ds443gscore 23· no DNS
punycode name “祥恒实业 scripts=CJK”random-looking name “H=3.62”
Lowxn--vhq58f31q2ru.wangscore 23· no DNS
punycode name “生态农业 scripts=CJK”random-looking name “H=3.66”
punycode name “就业培训 scripts=CJK”random-looking name “H=3.64”
punycode name “中国服装行业网 scripts=CJK”random-looking name “H=4.22”
punycode name “智包联实业 scripts=CJK”random-looking name “H=3.79”
punycode name “航空工业昌飞 scripts=CJK”random-looking name “H=3.97”
punycode name “优箱辰实业 scripts=CJK”random-looking name “H=3.73”
punycode name “산본휴대폰성지 scripts=HANGUL”random-looking name “H=4.17”
punycode name “잠실휴대폰성지 scripts=HANGUL”random-looking name “H=4.05”
punycode name “안양휴대폰성지 scripts=HANGUL”random-looking name “H=4.09”
punycode name “석촌휴대폰성지 scripts=HANGUL”random-looking name “H=4.05”
punycode name “방이휴대폰성지 scripts=HANGUL”random-looking name “H=4.05”
punycode name “四川柑橘种植 scripts=CJK”random-looking name “H=3.73”
Lowxn--wr3bt9duvex3s.comscore 23· active website
punycode name “앤선불폰 scripts=HANGUL”random-looking name “H=3.64”
punycode name “中国新东方 scripts=CJK”random-looking name “H=3.75”
Lowxn--xhq7a823cczplb.wangscore 23· no DNS
punycode name “中国新东方 scripts=CJK”random-looking name “H=3.75”
Lowxn--yfrt8ufq2azvo.shopscore 23· not probed yet
punycode name “红岸加速 scripts=CJK”random-looking name “H=3.77”
punycode name “민원문서서비스 scripts=HANGUL”random-looking name “H=4.01”
Lowxn--zj4b17icybw3m.agencyscore 23· boilerplate page
punycode name “인증센터 scripts=HANGUL”random-looking name “H=3.77”
Lowxn--zj4b17icybw3m.voyagescore 23· boilerplate page
punycode name “인증센터 scripts=HANGUL”random-looking name “H=3.77”
Low0xgate.orgscore 22· active website
page impersonates a brand “coinbase”
Low123drohnenschulung.comscore 22echoes hulu
brand in the name “hulu”brand plus digits “123drohnenschulung”
Low188159.techscore 22· active website
page impersonates a brand “PayPal”
Low7eeez.spacescore 22· active website
page impersonates a brand “Netflix”
Low80cou.xyzscore 22· boilerplate page
TLD with a high abuse rate “xyz”login form “has_form+login words”
Low8999bdt.questscore 22· active website
TLD with a high abuse rate “quest”page pushes urgent payment “Claim your bonus”
Low988tebu.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
lure words (login, verify, secure…) “account,customer,customers,service”very long name “31”
Lowaccruewelldata.spacescore 22· active website
page impersonates a brand “Coinbase”

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.