Flagged newborn domains, Sunday, November 1, 2026

7,024 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumxn--iiq7m890f.xyzscore 26· no web server
punycode name “亿丰淘 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--jjq.topscore 26· active website
punycode name “乔 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--kbru5pg9l.xyzscore 26· blocked the probe
punycode name “好分期 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--kcrt85h.topscore 26· active website
punycode name “紅利 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--kdv5c057fuuh.topscore 26· blocked the probe
punycode name “紫薇斗数 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--kimi-ft4l5e.topscore 26· no DNS
punycode name “蜜蜂kimi scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--kor803f.icuscore 26· active website
punycode name “反目 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--lb5aa.xyzscore 26· active website
punycode name “锅锅 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--lx-qp3cv97bnwc.xyzscore 26· no DNS
punycode name “lx工作室 scripts=CJK/LATIN”TLD with a high abuse rate “xyz”
Mediumxn--mnqp9mnn3b.xyzscore 26· no web server
punycode name “代商练 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--mnqv9qyxx.xyzscore 26· no web server
punycode name “代父园 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--n8jaep2em2xtc4716cwc6f.beautyscore 26· active website
punycode name “およう願いい安します scripts=CJK/HIRAGANA”TLD with a high abuse rate “beauty”
Mediumxn--n8jaep2em2xtc4716cwc6f.lolscore 26· no DNS
punycode name “およう願いい安します scripts=CJK/HIRAGANA”TLD with a high abuse rate “lol”
Mediumxn--n8jaep2em2xtc4716cwc6f.xyzscore 26· no web server
punycode name “およう願いい安します scripts=CJK/HIRAGANA”TLD with a high abuse rate “xyz”
Mediumxn--n9s162h.topscore 26· no DNS
punycode name “蜂學 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--ohqs6nnlw2svujgme.topscore 26· empty page
punycode name “官方专拍商品 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--oor673b.topscore 26· empty page
punycode name “发明 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--pss072d.xyzscore 26· active website
punycode name “大王 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--qoq63et4i8y1b.xyzscore 26· no DNS
punycode name “天童凯伊 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--rhqs41p.xyzscore 26· active website
punycode name “世音 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--rutz72h.xyzscore 26· empty page
punycode name “常识 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--sdvpct66guuh.topscore 26· no DNS
punycode name “紫薇斗數 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--sjq1x70c85snyc.topscore 26· no DNS
punycode name “九兒工作室 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--sqrp13btua.topscore 26· no DNS
punycode name “曾明君 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--xsq17b7o66r.topscore 26· no DNS
punycode name “初塵依兮 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--xsq17b7om33a.topscore 26· blocked the probe
punycode name “初尘依兮 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--yeta953n.topscore 26· active website
punycode name “小小然 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--yetq07a.topscore 26· active website
punycode name “小正 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--yets00g.icuscore 26· no web server
punycode name “小航 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--yets9u.xyzscore 26· no DNS
punycode name “小昱 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--yetw5bnyc.topscore 26· active website
punycode name “怒小川 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--zvz748a.funscore 26· no web server
punycode name “贻笙 scripts=CJK”TLD with a high abuse rate “fun”
Mediumbtv168sensational74.storescore 25· blocked the probe
random-looking name “H=3.83”brand in page title, not in the name “cloudflare”
Mediumconnectorygroup.orgscore 25· no DNS
nameserver domain born the same day “tryconnectorygroup.com”
nameserver domain born the same day “tryconnectorygroup.com”
Mediumconnectorygrouphq.comscore 25
nameserver domain born the same day “tryconnectorygroup.com”
nameserver domain born the same day “tryconnectorygroup.com”
Mediumconnectorygrouppro.orgscore 25· no DNS
nameserver domain born the same day “tryconnectorygroup.com”
Mediumeterneth.comscore 25
nameserver domain born the same day “eterneth.work”
Mediumtipoffsi.comscore 25
nameserver domain born the same day “roseball.xyz”
Lowgooglingmailbox.comscore 24echoes gmail· registrar placeholder
brand in the name “gmail”identical page on many newborns “545 identical pages”
Lowlocalappliancerepairservices.buzzscore 24· placeholder page
lure words (login, verify, secure…) “service,services”very long name “28”TLD with a high abuse rate “buzz”
Lowmarcoschimneycleaningservices.homesscore 24· active website
lure words (login, verify, secure…) “service,services”very long name “29”TLD with a high abuse rate “homes”
Lowmyrevolution.shopscore 24echoes revolut· boilerplate page
brand in the name “revolut”identical page on many newborns “1906 identical pages”
Lowporterchimneycleaningservices.homesscore 24· active website
lure words (login, verify, secure…) “service,services”very long name “29”TLD with a high abuse rate “homes”
Lowsableandsteam.shopscore 24· active website
form on a brand-styled page “has_form”form submits over plain HTTP “http://sableandsteam.shop/”
Lowsaffronandsteam.shopscore 24· active website
form on a brand-styled page “has_form”form submits over plain HTTP “http://saffronandsteam.shop/”
Lowtorontoroofingandconstruction.comscore 24· parked, for sale
very long name “29”brand in page title, not in the name “godaddy”
Lowvishwanathlaptopsandcomputers.comscore 24· active website
very long name “29”brand in page title, not in the name “apple”
Lowxn--elovixgesto-i8a.techscore 24· active website
punycode name “elovixgestão scripts=LATIN”form submits over plain HTTP “http://xn--elovixgesto-i8a.tech/”

Same data as JSON: /api/zone/risk?day=2026-11-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.