Flagged newborn domains, Wednesday, October 21, 2026

16,563 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “apothekenbörse scripts=LATIN”
punycode name “artbysireí scripts=LATIN”
punycode name “arubān scripts=LATIN”
punycode name “asiadöner scripts=LATIN”
punycode name “atelierkèkètte scripts=LATIN”
punycode name “atlassäkerhet scripts=LATIN”
punycode name “爱色av scripts=CJK/LATIN”
punycode name “avrupalıotokurtarma scripts=LATIN”
punycode name “axelarigatokøbenhavn scripts=LATIN”
punycode name “aydınsigorta scripts=LATIN”
Lowxn--b1abadga3dadpe.spacescore 18· active website
punycode name “городгероев scripts=CYRILLIC”
Lowxn--b9w10itu8a.mobiscore 18· no DNS
punycode name “锐玖源 scripts=CJK”
punycode name “baagøe scripts=LATIN”
Lowxn--bagr-7oa.comscore 18
punycode name “bagèr scripts=LATIN”
punycode name “bahcetarım scripts=LATIN”
punycode name “beautý scripts=LATIN”
punycode name “becasbenitojuárez scripts=LATIN”
punycode name “bediseñoconalma scripts=LATIN”
Lowxn--betco1413-ypb.comscore 18· no DNS
punycode name “betcıo1413 scripts=LATIN”
punycode name “beykozmalimüşavir scripts=LATIN”
punycode name “biçerstore scripts=LATIN”
punycode name “bijoux-connectés-sos scripts=LATIN”
punycode name “bim-yaşam scripts=LATIN”
punycode name “bimyaşam scripts=LATIN”
punycode name “bioverfügbar scripts=LATIN”
Lowxn--bioverfgbar-zhb.infoscore 18· boilerplate page
punycode name “bioverfügbar scripts=LATIN”
Lowxn--bioverfgbar-zhb.storescore 18· boilerplate page
punycode name “bioverfügbar scripts=LATIN”
punycode name “bioverfügbarkeit scripts=LATIN”
punycode name “bitácoratech scripts=LATIN”
punycode name “정글짐 scripts=HANGUL”
Lowxn--blthnabeatha-dbb.orgscore 18· boilerplate page
punycode name “bláthnabeatha scripts=LATIN”
Lowxn--bndictions-b7ab.comscore 18· empty page
punycode name “bénédictions scripts=LATIN”
punycode name “bondegärdet scripts=LATIN”
punycode name “boneappétit scripts=LATIN”
Lowxn--botnicaandina-5db.shopscore 18· boilerplate page
punycode name “botánicaandina scripts=LATIN”
punycode name “börü2 scripts=LATIN”
Lowxn--brekraftsfolk-3fb.onlinescore 18· placeholder page
punycode name “bærekraftsfolk scripts=LATIN”
Lowxn--btvx6h.xn--vhquvscore 18· no DNS
punycode name “永林 scripts=CJK”
Lowxn--buk-lma.comscore 18· not probed yet
punycode name “bukë scripts=LATIN”
punycode name “黑柴咖啡 scripts=CJK”
Lowxn--c1a0a.spacescore 18· active website
punycode name “гр scripts=CYRILLIC”
Lowxn--c1aolabgdj.spacescore 18· active website
punycode name “гороскоп scripts=CYRILLIC”
punycode name “차량검사예약 scripts=HANGUL”
punycode name “cabañaselremanso scripts=LATIN”
punycode name “cabañasmoviles scripts=LATIN”
Lowxn--cafancestraloficial-dzb.comscore 18· active website
punycode name “caféancestraloficial scripts=LATIN”
punycode name “cafecardeño scripts=LATIN”
punycode name “caffeína scripts=LATIN”
punycode name “calvèron scripts=LATIN”
Lowxn--calvron-5xa.onlinescore 18· registrar placeholder
punycode name “calvèron scripts=LATIN”

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.