Flagged newborn domains, Monday, October 19, 2026

6,937 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “yapıbank scripts=LATIN”
punycode name “yapıbankası scripts=LATIN”
punycode name “yapıbul scripts=LATIN”
punycode name “yapıustası scripts=LATIN”
punycode name “yarınındünyası scripts=LATIN”
Lowxn--yet812j.comscore 18
punycode name “小追 scripts=CJK”
punycode name “小王编程课 scripts=CJK”
Lowxn--yi7aa.linkscore 18· active website
punycode name “龙龙 scripts=CJK”
Lowxn--yi7aa.techscore 18· active website
punycode name “龙龙 scripts=CJK”
Lowxn--ypa-hoa.comscore 18
punycode name “yüpa scripts=LATIN”
Lowxn--yus296h.helpscore 18· no DNS
punycode name “奶蛙 scripts=CJK”
Lowxn--yy-njab.comscore 18· not probed yet
punycode name “yíyí scripts=LATIN”
punycode name “เลียหอย scripts=THAI”
punycode name “넘버원건설 scripts=HANGUL”
punycode name “일프로건설 scripts=HANGUL”
punycode name “陸ステ scripts=CJK/KATAKANA”
punycode name “özemrekaporta scripts=LATIN”
Lowxn--zirvedner44-wfb.comscore 18· empty page
punycode name “zirvedöner44 scripts=LATIN”
punycode name “zümremasasi scripts=LATIN”
punycode name “zniżkomat scripts=LATIN”
Lowzvezdy-v-dzhunglyah-3sezon-3seriya.cyouscore 18· boilerplate page
many hyphens “4”very long name “34”TLD with a high abuse rate “cyou”
very long name “42”random-looking name “H=3.83”TLD with a high abuse rate “xyz”
Low47654b32c649b083e61d65276cared.topscore 17· not probed yet
very long name “30”random-looking name “H=3.83”TLD with a high abuse rate “top”
very long name “32”random-looking name “H=4.56”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.41”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.35”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.16”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.29”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.24”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.52”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.23”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.35”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.24”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.35”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.24”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.33”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.33”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.20”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.33”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.39”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.54”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=3.97”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.45”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.33”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.13”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.44”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.22”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.07”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.12”TLD with a high abuse rate “xyz”
very long name “32”random-looking name “H=4.22”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.