Flagged newborn domains, Wednesday, October 28, 2026

9,368 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

nameserver domain born the same day “runlemonllight.com”
Mediumlemonllightco.comscore 25
nameserver domain born the same day “lemonliightdirect.com”
nameserver domain born the same day “growlemonllight.com”
Mediumlemonllightdirect.comscore 25
nameserver domain born the same day “growlemonllight.com”
Mediumlemonllighthq.comscore 25
nameserver domain born the same day “runlemonllight.com”
Mediumlemonllighthub.comscore 25
nameserver domain born the same day “runlemonllight.com”
Mediumlemonllightlabs.comscore 25· no DNS
nameserver domain born the same day “growlemonllight.com”
Mediumlemonllightnow.comscore 25
nameserver domain born the same day “runlemonllight.com”
Mediumlemonllightplus.comscore 25
nameserver domain born the same day “growlemonllight.com”
Mediummeetherovideo.comscore 25
nameserver domain born the same day “tryherovideo.com”
Mediummeetlemonliight.comscore 25
nameserver domain born the same day “runlemonllight.com”
Mediummeetlemonllight.comscore 25
nameserver domain born the same day “growlemonllight.com”
nameserver domain born the same day “seetemplehallgroup.com”
Mediumninte-ndo.shopscore 25echoes nintendo· empty page
brand in the name “nintendo”brand name and brand-styled page “nintendo”
Mediumrunlemonliight.comscore 25
nameserver domain born the same day “growlemonllight.com”
Mediumseelemonliight.comscore 25
nameserver domain born the same day “growlemonllight.com”
Mediumseelemonllight.comscore 25
nameserver domain born the same day “growlemonllight.com”
Mediumsendlemonliight.comscore 25
nameserver domain born the same day “runlemonllight.com”
Mediumsendlemonllight.comscore 25
nameserver domain born the same day “runlemonllight.com”
nameserver domain born the same day “taxflowpartnersadvisory.com”
Mediumtemplehallgroup.orgscore 25· redirects elsewhere
nameserver domain born the same day “seetemplehallgroup.com”
nameserver domain born the same day “seetemplehallgroup.com”
Mediumtemplehallgroupco.comscore 25
nameserver domain born the same day “seetemplehallgroup.com”
Mediumtemplehallgrouphq.comscore 25
nameserver domain born the same day “seetemplehallgroup.com”
Mediumtemplehallgrouphq.orgscore 25· redirects elsewhere
nameserver domain born the same day “seetemplehallgroup.com”
nameserver domain born the same day “seetemplehallgroup.com”
nameserver domain born the same day “seetemplehallgroup.com”
Mediumtrylemonliight.comscore 25
nameserver domain born the same day “growlemonllight.com”
Mediumtrylemonllight.comscore 25
nameserver domain born the same day “runlemonllight.com”
Mediumuseherovideo.comscore 25
nameserver domain born the same day “tryherovideo.com”
Mediumuselemonliight.comscore 25
nameserver domain born the same day “growlemonllight.com”
Mediumuselemonllight.comscore 25
nameserver domain born the same day “runlemonllight.com”
Mediumyuksekvoltaj.comscore 25
nameserver domain born the same day “domainborsasi.com”
Lowbestetsystores.onlinescore 24echoes etsy· registrar placeholder
brand in the name “etsy”identical page on many newborns “3435 identical pages”
Lowbeyondnorthwoodstraveladvisors.comscore 24· active website
very long name “30”brand in page title, not in the name “wordpress”
Lowfacetsystems.orgscore 24echoes etsy· registrar placeholder
brand in the name “etsy”identical page on many newborns “3435 identical pages”
Lowgadgetsystems.orgscore 24echoes etsy· registrar placeholder
brand in the name “etsy”identical page on many newborns “3435 identical pages”
lure words (login, verify, secure…) “login,portal,service”many hyphens “4”
Lowmember-identity-verification6645.xyzscore 24· blocked the probe
lure words (login, verify, secure…) “member,verification”very long name “32”TLD with a high abuse rate “xyz”
Lowtherevolutionofwork.orgscore 24echoes revolut· boilerplate page
brand in the name “revolut”identical page on many newborns “2279 identical pages”
punycode name “ваша-реклама-в-интернете scripts=CYRILLI”many hyphens “3”
Lowxn----7sbqsb0aeihda1l.onlinescore 24· active website
punycode name “пак-экспресс scripts=CYRILLIC”form submits over plain HTTP “http://xn----7sbqsb0aeihda1l.online/”
Lowxn--2d3b21u2ii.shopscore 24· active website
punycode name “뮤제트 scripts=HANGUL”form submits over plain HTTP “http://xn--2d3b21u2ii.shop/”
Lowxn--2e0bj9oxqj0zaa903bws8a.shopscore 24· active website
punycode name “하수구싹싹뚫어 scripts=HANGUL”form submits over plain HTTP “http://xn--2e0bj9oxqj0zaa903bws8a.shop/”
Lowxn--hy1bm6gbvihns.shopscore 24· active website
punycode name “드림쇼파 scripts=HANGUL”form submits over plain HTTP “http://xn--hy1bm6gbvihns.shop/”
punycode name “便利屋たすけ舟 scripts=CJK/HIRAGANA”random-looking name “H=4.37”
Lowxn--1lq90ibvaw52k.mobiscore 23· no DNS
punycode name “北京胡同 scripts=CJK”random-looking name “H=3.91”
punycode name “佛山橘海 scripts=CJK”random-looking name “H=3.64”
Lowxn--220b53kfxcgwi.shopscore 23· no web server
punycode name “내몸사랑 scripts=HANGUL”random-looking name “H=3.64”
punycode name “제로백주소안내 scripts=HANGUL”random-looking name “H=4.17”

Same data as JSON: /api/zone/risk?day=2026-10-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.