Flagged newborn domains, Friday, October 30, 2026

11,861 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowteoriya-bolshogo-vzryva-2026.hairscore 18· no web server
many hyphens “3”very long name “28”TLD with a high abuse rate “hair”
many hyphens “3”very long name “28”TLD with a high abuse rate “autos”
lure words (login, verify, secure…) “account,limited,service,services”
Lowveloqoraservices.comscore 18· active website
lure words (login, verify, secure…) “service,services”form submits over plain HTTP “https://veloqoraservices.com/”
Lowvine-starling.clickscore 18echoes starling· not probed yet
ambiguous brand word “starling”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”
lure words (login, verify, secure…) “security,service,services”
Lowworkday.worksscore 18echoes workday· blocked the probe
brand in the name “workday”brand name redirects elsewhere “expireddomains.com”
Lowxinyan-art-management-solarflame0117.xyzscore 18· active website
many hyphens “3”very long name “36”TLD with a high abuse rate “xyz”
Lowxn-----6kc0bhgshom5dzb7b.sitescore 18· empty page
punycode name “сайты-по-ключ scripts=CYRILLIC”
Lowxn-----6kcrxjhuiqn1ewe.onlinescore 18· empty page
punycode name “сайт-под-ключ scripts=CYRILLIC”
punycode name “위반건축물-양성화전문-건축사사무소 scripts=HANGUL”
punycode name “공식-양주덕정역에피트 scripts=HANGUL”
Lowxn----326f500b.orgscore 18· empty page
punycode name “허-용 scripts=HANGUL”
Lowxn----7sb9ac9e.onlinescore 18· empty page
punycode name “ма-мы scripts=CYRILLIC”
Lowxn----7sbbae5ce7a4a.shopscore 18· robots.txt denied
punycode name “пак-табак scripts=CYRILLIC”
Lowxn----btbeqedh2agccssme7l.techscore 18· robots.txt denied
punycode name “горизонт-событий scripts=CYRILLIC”
punycode name “сенькин-брод scripts=CYRILLIC”
Lowxn----btbjbplucltd8k.onlinescore 18· robots.txt denied
punycode name “сенькин-брод scripts=CYRILLIC”
Lowxn----htbgibkeejfi8c5f.onlinescore 18· blocked the probe
punycode name “умный-должник scripts=CYRILLIC”
punycode name “정도파트너스-정답지사 scripts=HANGUL”
punycode name “김해신문-센트럴아이파크 scripts=HANGUL”
Lowxn--0et936a.vipscore 18· empty page
punycode name “欢少 scripts=CJK”
Lowxn--0hvnj35mtnw.xn--fiq228c5hsscore 18· no DNS
punycode name “永昌智纺 scripts=CJK”
Lowxn--0tr006cu7f.comscore 18· no DNS
punycode name “和氏璧 scripts=CJK”
Lowxn--0trz71h.comscore 18
punycode name “羲和 scripts=CJK”
punycode name “เฮงฮิต1 scripts=THAI”
punycode name “ดูนม1 scripts=THAI”
punycode name “领跑梦 scripts=CJK”
Lowxn--13w540abvf.sitescore 18· no web server
punycode name “苗简淘 scripts=CJK”
Lowxn--13w946b9vg.sitescore 18· no web server
punycode name “谷茂淘 scripts=CJK”
punycode name “หวยเจ้าสมุทร168 scripts=THAI”
Lowxn--18s824byhw.sitescore 18· no web server
punycode name “季豆淘 scripts=CJK”
punycode name “碳化矽系列 scripts=CJK”
Lowxn--1ckp6dyd.comscore 18
punycode name “ヘッセル scripts=KATAKANA”
punycode name “乃木坂 scripts=CJK”
Lowxn--1krw50k.comscore 18
punycode name “卒論 scripts=CJK”
punycode name “หีงาม2 scripts=THAI”
punycode name “211高校 scripts=CJK”
Lowxn--22ce6dxbg5n.emailscore 18· boilerplate page
punycode name “เลขนคร scripts=THAI”
punycode name “공사24 scripts=HANGUL”
Lowxn--24-ow2dp18n.onlinescore 18· active website
punycode name “24计师 scripts=CJK”
punycode name “신용카드현금화24sana scripts=HANGUL/LATIN”
punycode name “카드깡24sana scripts=HANGUL/LATIN”
Lowxn--28-uw4cz38w.vipscore 18· no web server
punycode name “先锋28 scripts=CJK”
punycode name “우주경 scripts=HANGUL”
punycode name “레고티켓 scripts=HANGUL”
Lowxn--2hvp12a.comscore 18
punycode name “明珠 scripts=CJK”
punycode name “그린에이치원 scripts=HANGUL”
Lowxn--2i0b84g9l594a5vgbxe4r3a.comscore 18· blocked the probe
punycode name “시그니엘더부평 scripts=HANGUL”
punycode name “그린플라스틱 scripts=HANGUL”

Same data as JSON: /api/zone/risk?day=2026-10-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.