Flagged newborn domains, Tuesday, November 3, 2026

9,531 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowxn--cabaaslaamelia-tnb.storescore 18· no DNS
punycode name “cabañaslaamelia scripts=LATIN”
punycode name “cabañaslacasadelcielo scripts=LATIN”
punycode name “cafémarcadet scripts=LATIN”
Lowxn--cako-dpa.comscore 18
punycode name “cakéo scripts=LATIN”
punycode name “calçotscuits scripts=LATIN”
Lowxn--calotsvalls-o9a.comscore 18· no web server
punycode name “calçotsvalls scripts=LATIN”
Lowxn--camaro-7ta.onlinescore 18· no DNS
punycode name “camarão scripts=LATIN”
punycode name “capricciocaffè scripts=LATIN”
punycode name “carınca scripts=LATIN”
punycode name “carpinteríabarrandeguy scripts=LATIN”
punycode name “carpínteriaelizondo scripts=LATIN”
Lowxn--casamentolviaejunior-y4b.sitescore 18· boilerplate page
punycode name “casamentolíviaejunior scripts=LATIN”
Lowxn--cdigodivinofull-vrb.sitescore 18· boilerplate page
punycode name “códigodivinofull scripts=LATIN”
punycode name “山大地纬 scripts=CJK”
Lowxn--chq5q.vipscore 18· redirects elsewhere
punycode name “亿万 scripts=CJK”
punycode name “christinetransgé scripts=LATIN”
punycode name “châteaumargo scripts=LATIN”
punycode name “célieletronicos scripts=LATIN”
punycode name “cncbeauté scripts=LATIN”
punycode name “cocukbakıcı scripts=LATIN”
Lowxn--codigoclnico-zfb.onlinescore 18· active website
punycode name “codigoclínico scripts=LATIN”
punycode name “conexãolimpeza scripts=LATIN”
punycode name “corodecastañuelasdesegovia scripts=LATIN”
punycode name “ècosmetics scripts=LATIN”
Lowxn--cssa.vipscore 18· redirects elsewhere
punycode name “多多 scripts=CJK”
Lowxn--cvdiseo-9za.onlinescore 18· active website
punycode name “cvdiseño scripts=LATIN”
punycode name “꿈틀리 scripts=HANGUL”
punycode name “danieloña scripts=LATIN”
punycode name “dcpeluqueríafemenina scripts=LATIN”
punycode name “dijitaldünya2026 scripts=LATIN”
punycode name “dm종합설비님의blog scripts=HANGUL/LATIN”
Lowxn--do-r12c37d313godhqi4b.vipscore 18· empty page
punycode name “do电竞俱乐部 scripts=CJK/LATIN”
punycode name “doňajicara scripts=LATIN”
Lowxn--doanhnghipcati-dpb9623jvpa.comscore 18· registrar placeholder
punycode name “doanhnghiệpcủatôi scripts=LATIN”
Lowxn--dpqt22e.comscore 18
punycode name “水传 scripts=CJK”
punycode name “dralauralemeserviçosmedicos scripts=LATI”
punycode name “dreirad-köln scripts=LATIN”
Lowxn--e1abnndbhfq.artscore 18· empty page
punycode name “прожектор scripts=CYRILLIC”
Lowxn--e1afbfdp5af.spacescore 18· empty page
punycode name “кинетикс scripts=CYRILLIC”
punycode name “йцукен scripts=CYRILLIC”
Lowxn--e1ahhbkbgjsu4g.onlinescore 18· registrar placeholder
punycode name “мойпортфель scripts=CYRILLIC”
Lowxn--e1ajjdmw.shopscore 18· boilerplate page
punycode name “конфер scripts=CYRILLIC”
Lowxn--e1ajjdwk5c.xn--80asehdbscore 18· not probed yet
punycode name “конфеты scripts=CYRILLIC”
Lowxn--e1ajtbgf.onlinescore 18· boilerplate page
punycode name “скутер scripts=CYRILLIC”
Lowxn--e1ajtbgf.shopscore 18· active website
punycode name “скутер scripts=CYRILLIC”
Lowxn--e1aramddi.shopscore 18· active website
punycode name “фотосет scripts=CYRILLIC”
Lowxn--e1aramddi.sitescore 18· active website
punycode name “фотосет scripts=CYRILLIC”
Lowxn--e1aramddi.spacescore 18· active website
punycode name “фотосет scripts=CYRILLIC”
Lowxn--e1aramddi.storescore 18· active website
punycode name “фотосет scripts=CYRILLIC”
Lowxn--e1aramddi.techscore 18· active website
punycode name “фотосет scripts=CYRILLIC”

Same data as JSON: /api/zone/risk?day=2026-11-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.