Flagged newborn domains, Tuesday, October 27, 2026

9,671 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowtrystep.shopscore 22· active website
page impersonates a brand “PayPal”
Lowtxdxeclothing.shopscore 22· active website
page impersonates a brand “PayPal”
Lowudjelanta.proscore 22· active website
page impersonates a brand “PayPal”
Lowultimateearsprohifi.shopscore 22· active website
page impersonates a brand “PayPal”
Lowvariantwheelsrims.shopscore 22· active website
page impersonates a brand “PayPal”
Lowververecordssound.shopscore 22· active website
page impersonates a brand “PayPal”
Lowvictoriabeckhamgoods.shopscore 22· active website
page impersonates a brand “PayPal”
Lowvioletgreymakeup.shopscore 22· active website
page impersonates a brand “PayPal”
Lowviviebikesrider.shopscore 22· active website
page impersonates a brand “PayPal”
Lowvivitarlens.shopscore 22· active website
page impersonates a brand “PayPal”
Lowvograceware.shopscore 22· active website
page impersonates a brand “PayPal”
Lowweenapparel.shopscore 22· active website
page impersonates a brand “PayPal”
Lowwestafricadollarcard.storescore 22· active website
page impersonates a brand “Netflix”
Lowwhiskerly.petscore 22· active website
page impersonates a brand “PayPal”
Lowwmscodecor.shopscore 22· active website
page impersonates a brand “PayPal”
Lowwoodstackclothing.shopscore 22· active website
page impersonates a brand “PayPal”
Lowwootingtech.shopscore 22· active website
page impersonates a brand “PayPal”
Lowwyzetek.shopscore 22· active website
page impersonates a brand “PayPal”
punycode name “ทางเข้าหวยเลขมหาชน scripts=THAI”very long name “31”
punycode name “ขายแผ่นโพลีคาร์บอเนต scripts=THAI”very long name “34”
Lowxn--289aw83be2c0xa0b780jxjaz2k.comscore 22· active website
punycode name “학점은행제희경쌤 scripts=HANGUL”very long name “30”
punycode name “제주바이오테크놀로지연구소 scripts=HANGUL”very long name “45”
Lowxn--2i0bq5hvjp1kpzchxro8a528e.sitescore 22· empty page
punycode name “더샵송도그란테르 scripts=HANGUL”very long name “29”
punycode name “외로운밤평생주소 scripts=HANGUL”very long name “30”
Lowxn--3e0br9sgwli9i9wbn1hpa25v.comscore 22· boilerplate page
punycode name “한국의료타투학회 scripts=HANGUL”very long name “28”
punycode name “קליינטאופיסניהולקשרילקוחות scripts=HEBRE”very long name “37”
punycode name “林口爵怡溫德姆酒店 scripts=CJK”very long name “32”
punycode name “두산위브더제니스센트럴천안 scripts=HANGUL”very long name “42”
punycode name “空客之星国际会客厅 scripts=CJK”very long name “32”
punycode name “全球空客之星会客厅 scripts=CJK”very long name “30”
punycode name “contact-eligibilité-energetique scripts=”very long name “31”
punycode name “中国养殖设备厂家 scripts=CJK”very long name “30”
Lowxn--h49ak81ajjaj6ao6j153afpd.sitescore 22· active website
punycode name “선불폰개통방법 scripts=HANGUL”very long name “28”
punycode name “herkunftsnachweisregister-wärme scripts=”very long name “31”
Lowxn--herkunftsnachweisregister-wrme-mtc.orgscore 22· boilerplate page
punycode name “herkunftsnachweisregister-wärme scripts=”very long name “31”
Lowxn--o39a65k7mookcosdd41abuc51e.lifescore 22· active website
punycode name “당신의편안한휴가 scripts=HANGUL”very long name “30”
Lowxn--o39au8jrhi8pc8bhby26ghvrfk3a.sitescore 22· active website
punycode name “달려가는힐링마사지 scripts=HANGUL”very long name “32”
punycode name “여기여사이트공식 scripts=HANGUL”very long name “29”
punycode name “공식대표홈페이지 scripts=HANGUL”very long name “29”
punycode name “연구선도학교공모전 scripts=HANGUL”very long name “32”
punycode name “赔钱机场专线官网 scripts=CJK”very long name “30”
Lowxn--ohqx6t4rdj6ohu2aczai13e4on.orgscore 22· not probed yet
punycode name “赔钱机场专线官网 scripts=CJK”very long name “30”
punycode name “翻墙机场专线官网 scripts=CJK”very long name “29”
Lowxn--ohqx6tc4az1fm0tij7ai3ax2b.orgscore 22· active website
punycode name “翻墙机场专线官网 scripts=CJK”very long name “29”
punycode name “ostjes-entraînementsdefootball scripts=L”very long name “30”
punycode name “perrouts-salgadoserefeiçõesltda scripts=”very long name “31”
punycode name “商业地产行业俱乐部 scripts=CJK”very long name “28”
punycode name “vivianymamediogarrainstalações scripts=L”very long name “30”
punycode name “西南乡村振兴平台 scripts=CJK”very long name “29”
Lowyolotaxes.camscore 22· no DNS
lure words (login, verify, secure…) “taxes”TLD with a high abuse rate “cam”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-10-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.