Flagged newborn domains, Friday, October 30, 2026

11,861 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumseo-anomaly-top-667.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-669.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-670.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-672.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-673.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-675.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-676.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-680.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-681.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-684.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-686.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-688.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumseo-anomaly-top-690.xyzscore 34· active website
many hyphens “3”TLD with a high abuse rate “xyz”brand in page title, not in the name “telegram”
Mediumtheaccessoryedit.xyzscore 34· active website
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”
punycode name “trinityblackschrödingerspayments scripts”lure words (login, verify, secure…) “payment,payments”very long name “32”
Mediumflueton.xyzscore 33· no DNS
TLD with a high abuse rate “xyz”nameserver domain born the same day “flueton.com”
Mediumliquid-extract-naver-daegu.sitescore 33echoes naver· registrar placeholder
ambiguous brand word “naver”many hyphens “3”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand name and brand-styled page “naver”
Mediumliquid-extract-naver-seoul.sitescore 33echoes naver· registrar placeholder
ambiguous brand word “naver”many hyphens “3”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand name and brand-styled page “naver”
Mediumliquid-extract-naver-ulsan.sitescore 33echoes naver· registrar placeholder
ambiguous brand word “naver”many hyphens “3”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand name and brand-styled page “naver”
Mediumapostilleservicesmaryland.comscore 32· registrar placeholder
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “hostinger”
Mediumbmoreinrecovery.orgscore 32· other
lure words (login, verify, secure…) “recover,recovery”brand in page title, not in the name “cloudflare”
Mediumcdhomeservices.orgscore 32· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “namecheap”
Mediumchippyshandymanservices.comscore 32· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “wordpress”
Mediumclgotimeservices.comscore 32· blocked the probe
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “chatgpt”
Mediumdancerevolutiontgn.catscore 32echoes revolut· active website
brand in the name “revolut”form on a brand-styled page “has_form”
Mediumkmlogisticservices.comscore 32· other
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “cloudflare”
Mediumregistration-required-assistance01.clickscore 32· blocked the probe
very long name “34”TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”
Mediumoperatingdelivery.comscore 31
lure words (login, verify, secure…) “delivery”nameserver domain born the same day “discoveroperatinghq.com”
Mediumxn--1lqx6dc2eg3m6wkk15e.topscore 31· no DNS
punycode name “廣元京東電商 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “top”
Mediumxn--2j1by2ko0metn.questscore 31· empty page
punycode name “다린해인 scripts=HANGUL”random-looking name “H=3.64”TLD with a high abuse rate “quest”
Mediumxn--54qp4qsvlw3pipnxu1a.xyzscore 31· not probed yet
punycode name “致长夜的星光 scripts=CJK”random-looking name “H=3.78”TLD with a high abuse rate “xyz”
Mediumxn--9frw06bftedv2c.topscore 31· redirects elsewhere
punycode name “永劫无间 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “top”
Mediumxn--fhq2c064b13bc31bdw2e.topscore 31· no DNS
punycode name “上海奶龍中學 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “top”
Mediumxn--fhq2c064bz1bw51bfy2e.topscore 31· no DNS
punycode name “上海奶龙中学 scripts=CJK”random-looking name “H=3.97”TLD with a high abuse rate “top”
Mediumxn--jlqt5rg4kfhi160a0ftj5k.topscore 31· active website
punycode name “比亚迪控股集团 scripts=CJK”random-looking name “H=4.08”TLD with a high abuse rate “top”
Mediumxn--lds007apjr86b.topscore 31· no DNS
punycode name “美圖絕景 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
Mediumxn--nlq99rtzkfhi160a0ftj5k.topscore 31· no DNS
punycode name “比亞迪控股集團 scripts=CJK”random-looking name “H=4.08”TLD with a high abuse rate “top”
Mediumxn--pssy23gqgbf2fis9a.topscore 31· no DNS
punycode name “藍色大肥魚 scripts=CJK”random-looking name “H=3.68”TLD with a high abuse rate “top”
Mediumxn--pssy23gqgbz2d718b.topscore 31· active website
punycode name “蓝色大肥鱼 scripts=CJK”random-looking name “H=3.83”TLD with a high abuse rate “top”
Mediumxn--psszg50dh9v8v8acw8a.topscore 31· no DNS
punycode name “華東奶龍大學 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “top”
Mediumxn--psszg50dixvun4act3b.topscore 31· no DNS
punycode name “奶龍月考大學 scripts=CJK”random-looking name “H=4.11”TLD with a high abuse rate “top”
Mediumxn--psszg50dxzmyp5a4lq.topscore 31· no DNS
punycode name “奶蛙科技大學 scripts=CJK”random-looking name “H=3.82”TLD with a high abuse rate “top”
Mediumxn--psszg58ckzvun4aev3b.topscore 31· no DNS
punycode name “奶龙月考大学 scripts=CJK”random-looking name “H=4.01”TLD with a high abuse rate “top”
Mediumxn--psszg58cz1myp5a4lq.topscore 31· no DNS
punycode name “奶蛙科技大学 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “top”
Mediumxn--rprv60hsdj2th.lolscore 31· no DNS
punycode name “红锁账号 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “lol”
Mediumxn--rtzldq0o992a.topscore 31· no DNS
punycode name “立羽電競 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “top”
Mediumxn--vf4b13h32qmwa.questscore 31· empty page
punycode name “오히사후 scripts=HANGUL”random-looking name “H=3.77”TLD with a high abuse rate “quest”
Mediumxn--vv4b25bdpojx87c.xyzscore 31· active website
punycode name “시티오씨엘 scripts=HANGUL”random-looking name “H=3.73”TLD with a high abuse rate “xyz”
Mediumxn--wcs427abosgua.topscore 31· empty page
punycode name “美图绝景 scripts=CJK”random-looking name “H=3.64”TLD with a high abuse rate “top”
Mediumxn--xhq9mi0ep6fgpo1g7a.topscore 31· no DNS
punycode name “广元京东电商 scripts=CJK”random-looking name “H=4.02”TLD with a high abuse rate “top”

Same data as JSON: /api/zone/risk?day=2026-10-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.