Flagged newborn domains, Wednesday, October 21, 2026

16,563 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowxn--ecko5byg4b2c8gb6057e8o6f.tokyoscore 22· boilerplate page
punycode name “ミライスピーカー評判 scripts=CJK/KATAKANA/KATAKANA”very long name “28”
Lowxn--eckyave7cb5i7fsbya4e1952c9hg397v.tokyoscore 22· boilerplate page
punycode name “イングリッシュビレッジ入会金 scripts=CJK/KATAKANA”very long name “36”
punycode name “陕西医疗器械平台 scripts=CJK”very long name “28”
punycode name “ggstudiobeautynailsuñasybelleza scripts=”very long name “31”
punycode name “insulfilmeacessóriosguarulhos scripts=LA”very long name “29”
punycode name “변호사안현희법률사무소 scripts=HANGUL”very long name “37”
punycode name “화서역아너스빌견본주택 scripts=HANGUL”very long name “38”
punycode name “无忧链接机场官网 scripts=CJK”very long name “30”
Lowxn--meso5hrserves9cntcq05ehiyb.orgscore 22· not probed yet
punycode name “无忧链接机场官网 scripts=CJK”very long name “30”
punycode name “야동코리아바로가기 scripts=HANGUL”very long name “33”
Lowxn--o80bl8j1obbwrvhfb2af31c6hhx0a.shopscore 22· active website
punycode name “해링턴플레이스노원 scripts=HANGUL”very long name “33”
punycode name “해월카라반앤캠핑 scripts=HANGUL”very long name “30”
punycode name “에어컨냉난방기매입 scripts=HANGUL”very long name “32”
punycode name “브레인시티로제비앙 scripts=HANGUL”very long name “31”
punycode name “롱브릭타일코리아 scripts=HANGUL”very long name “28”
Lowxn--ox1b14p68f7vbuxlv3cdyedtap9n.netscore 22· empty page
punycode name “이천칸타빌에듀파크 scripts=HANGUL”very long name “32”
punycode name “모자이크타일코리아 scripts=HANGUL”very long name “30”
punycode name “포세린타일코리아 scripts=HANGUL”very long name “28”
punycode name “projetooperaçãoresgateoficial scripts=LA”very long name “29”
punycode name “átilasilvarastreamentobloqueioveicular s”very long name “38”
punycode name “奄美大島自動車登録ここから scripts=CJK/HIRAGANA”very long name “40”
punycode name “거제유림노르웨이숲디오션 scripts=HANGUL”very long name “40”
punycode name “深圳市硅谷动力物业服务有限公司 scripts=CJK”very long name “49”
Lowyenmarkets.onlinescore 22· active website
page impersonates a brand “MetaMask”
Lowzagrebstock-exchange.proscore 22· active website
page impersonates a brand “PayPal”
Lowzombiecarnival.todayscore 22· active website
page impersonates a brand “PayPal”
Low2t6m9q1x4n8k0a5p3b7r.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Low3k8n1x5q0m7t2a9p4b6r.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Low5n1x8q4m0t7a2k9p3b6r.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Low6p1q8x3m9t0n5a2k7b4r.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Low8x2m5n0q7t4a1k9p3b6r.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Low9m4t1k7x2q8n0a5p3b6r.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowb3q7x1n9m5t0k4a8p2r6.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowm7x2q9n4t1a6k8p0b3r5.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lown7k3p9x1t5m0q2a8b4r6.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowq5b2n8x1m7t0k4a9p3r6.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowx2n7m5k0q9a1t4p8b3r6.sbsscore 21· no DNS
random-looking name “H=4.32”TLD with a high abuse rate “sbs”free DNS provider “dnsowl.com”
Lowybhfrjb9jw7uomt.icuscore 21· active website
random-looking name “H=3.64”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
Low037-hdd.vipscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low0nlinenpay0ut00.livescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low0xkkio8m.cymruscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low1000xbot.comscore 20· empty page
brand in page title, not in the name “telegram”
Low10044jojobet.comscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low1020thomas.shopscore 20· active website
brand in page title, not in the name “namecheap”
Low1020thomasyates.shopscore 20· active website
brand in page title, not in the name “namecheap”
Low10thomasyates20.shopscore 20· active website
brand in page title, not in the name “namecheap”
Low1492gallatin.comscore 20· redirects elsewhere
brand in page title, not in the name “nationwide”
Low168all-in-casino.comscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Low188bet.ingscore 20· server error
brand in page title, not in the name “cloudflare”
Low1kvsbzi.comscore 20· empty page
brand in page title, not in the name “google”

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.