Flagged newborn domains, Wednesday, November 4, 2026

11,283 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowxn--cira-dpa.comscore 18
punycode name “ciréa scripts=LATIN”
Lowxn--cjs118l.onlinescore 18· no DNS
punycode name “零域 scripts=CJK”
Lowxn--cjs118l.worldscore 18· no DNS
punycode name “零域 scripts=CJK”
punycode name “子域网 scripts=CJK”
punycode name “천상계ck scripts=HANGUL/LATIN”
Lowxn--cks304a4vt.wikiscore 18· boilerplate page
punycode name “网易堂 scripts=CJK”
punycode name “célesteglasses scripts=LATIN”
punycode name “clínicadeesthética scripts=LATIN”
punycode name “clínicamédicaasís scripts=LATIN”
punycode name “cœmmunitas scripts=LATIN”
punycode name “cn塑料包装微应用端口 scripts=CJK/LATIN”
punycode name “cn塑料包装移动端口 scripts=CJK/LATIN”
punycode name “cn塑料包装pc端口 scripts=CJK/LATIN”
Lowxn--concretservios-rjb.onlinescore 18· active website
punycode name “concretserviços scripts=LATIN”
punycode name “costasdeespaña scripts=LATIN”
Lowxn--costasdeespaa-tkb.infoscore 18· boilerplate page
punycode name “costasdeespaña scripts=LATIN”
Lowxn--costasdeespaa-tkb.storescore 18· boilerplate page
punycode name “costasdeespaña scripts=LATIN”
punycode name “círcledelívers scripts=LATIN”
Lowxn--crtn-l5a.orgscore 18· boilerplate page
punycode name “cśrtn scripts=LATIN”
Lowxn--cssa6471a.xn--vhquvscore 18· no DNS
punycode name “多能多 scripts=CJK”
Lowxn--ctt141k.comscore 18· no web server
punycode name “顺帆 scripts=CJK”
punycode name “심재형 scripts=HANGUL”
Lowxn--czru2dn0uhhi.worldscore 18· no DNS
punycode name “旅游商城 scripts=CJK”
Lowxn--d1abbahgcb0aijrom7f5g.onlinescore 18· registrar placeholder
punycode name “резиденциямелиор scripts=CYRILLIC”
Lowxn--d1abbahgcb0aijrom7f5g.sitescore 18· registrar placeholder
punycode name “резиденциямелиор scripts=CYRILLIC”
punycode name “резиденциялюксор scripts=CYRILLIC”
Lowxn--d1abbgfcohqnmkl0eugoa.onlinescore 18· registrar placeholder
punycode name “резиденциялюксор scripts=CYRILLIC”
Lowxn--d1abbgfcohqnmkl0eugoa.sitescore 18· registrar placeholder
punycode name “резиденциялюксор scripts=CYRILLIC”
Lowxn--d1abbgfcohqnmkl0eugoa.spacescore 18· registrar placeholder
punycode name “резиденциялюксор scripts=CYRILLIC”
Lowxn--d1abbgfcohqnmkl0eugoa.storescore 18· registrar placeholder
punycode name “резиденциялюксор scripts=CYRILLIC”
Lowxn--d1acvi.spacescore 18· active website
punycode name “демо scripts=CYRILLIC”
Lowxn--d1aiajdgjq2b8e.orgscore 18· not probed yet
punycode name “лордифильм scripts=CYRILLIC”
Lowxn--d1arf.shopscore 18· no DNS
punycode name “пнд scripts=CYRILLIC”
punycode name “dackelvomseehügel scripts=LATIN”
punycode name “ædbøy scripts=LATIN”
punycode name “decorê scripts=LATIN”
punycode name “dexbilişim scripts=LATIN”
punycode name “dügünplanı scripts=LATIN”
Lowxn--di-pv2c.comscore 18
punycode name “上di scripts=CJK/LATIN”
punycode name “diegefährten scripts=LATIN”
punycode name “digitale-lösungen scripts=LATIN”
punycode name “diseñatusespacios scripts=LATIN”
punycode name “diseñorami scripts=LATIN”
punycode name “diseñoxnotakiss scripts=LATIN”
punycode name “déjàvuintelligentmachines scripts=LATIN”
punycode name “døllar scripts=LATIN”
punycode name “døllars scripts=LATIN”
Lowxn--dnyanneniyiablas-jzb27gla.sitescore 18· robots.txt denied
punycode name “dünyanıneniyiablası scripts=LATIN”
punycode name “doğanzeminyapı scripts=LATIN”
punycode name “dépaysant scripts=LATIN”

Same data as JSON: /api/zone/risk?day=2026-11-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.