Flagged newborn domains, Tuesday, October 27, 2026

9,671 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “pāuluniu scripts=LATIN”
Lowxn--puluniu-s3a.orgscore 18· redirects elsewhere
punycode name “pāuluniu scripts=LATIN”
punycode name “ıqkartal scripts=LATIN”
punycode name “佳德电梯 scripts=CJK”
Lowxn--qst007c.comscore 18
punycode name “己相 scripts=CJK”
punycode name “ár-mágia scripts=LATIN”
Lowxn--r74a2h.comscore 18
punycode name “钢锋 scripts=CJK”
Lowxn--r8s7p.spacescore 18· no DNS
punycode name “小孙 scripts=CJK”
punycode name “rasmustofthøj scripts=LATIN”
punycode name “rddecorações scripts=LATIN”
punycode name “recroquevillé scripts=LATIN”
punycode name “relojeríaangelini scripts=LATIN”
Lowxn--rga.comscore 18
punycode name “ţ scripts=LATIN”
punycode name “règnefilms scripts=LATIN”
punycode name “无限臀山 scripts=CJK”
punycode name “rosée-paris scripts=LATIN”
punycode name “天建智 scripts=CJK”
punycode name “天然说 scripts=CJK”
Lowxn--s3co0dzb.comscore 18
punycode name “เปีย scripts=THAI”
Lowxn--s3co1c5e.onlinescore 18· robots.txt denied
punycode name “ป้าย scripts=THAI”
punycode name “sametgıda scripts=LATIN”
Lowxn--sanittshaus-p8a.berlinscore 18· redirects elsewhere
punycode name “sanitätshaus scripts=LATIN”
punycode name “sargın scripts=LATIN”
Lowxn--sassocit-h1ab.storescore 18· excluded
punycode name “sassociété scripts=LATIN”
punycode name “savéli scripts=LATIN”
punycode name “sb-gebäudepflege scripts=LATIN”
punycode name “sécreativosas scripts=LATIN”
punycode name “südkurve scripts=LATIN”
punycode name “señorfuego scripts=LATIN”
Lowxn--ses554g.vipscore 18· not probed yet
punycode name “网址 scripts=CJK”
Lowxn--sinmonkey-lrb.comscore 18· boilerplate page
punycode name “sķinmonkey scripts=LATIN”
punycode name “siobhánfoley scripts=LATIN”
punycode name “sköndalcentrum scripts=LATIN”
punycode name “skínsmonkey scripts=LATIN”
Lowxn--skrl-7qa.comscore 18
punycode name “skröl scripts=LATIN”
Lowxn--skrl-ira.comscore 18
punycode name “skrøl scripts=LATIN”
Lowxn--sla-bma.comscore 18
punycode name “séla scripts=LATIN”
Lowxn--smdiseointegral-3qb.storescore 18· no DNS
punycode name “smdiseñointegral scripts=LATIN”
punycode name “súmele scripts=LATIN”
punycode name “solideréno scripts=LATIN”
Lowxn--sols-ira.comscore 18
punycode name “soløs scripts=LATIN”
punycode name “sãopauloretailpark scripts=LATIN”
punycode name “sophiá scripts=LATIN”
punycode name “síorastays scripts=LATIN”
punycode name “원파크 scripts=HANGUL”
punycode name “sportundalpinorthopädie scripts=LATIN”
punycode name “罗伯泰克 scripts=CJK”
Lowxn--spr051dcjj.sitescore 18· no web server
punycode name “司竹淘 scripts=CJK”
punycode name “søremøre scripts=LATIN”
punycode name “sésame-acces scripts=LATIN”

Same data as JSON: /api/zone/risk?day=2026-10-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.