Flagged newborn domains, Thursday, November 5, 2026

10,864 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumxn--6or531n.topscore 26· no DNS
punycode name “風口 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--6ort71n.topscore 26· not probed yet
punycode name “风口 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--6rsr28b.topscore 26· no web server
punycode name “洺夕 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--6u6a.xyzscore 26· active website
punycode name “鱼 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--7lq.topscore 26· not probed yet
punycode name “亲 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--7mwt70c.topscore 26· boilerplate page
punycode name “花残 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--80aackor9bc6g.lolscore 26· not probed yet
punycode name “кыздарбар scripts=CYRILLIC”TLD with a high abuse rate “lol”
Mediumxn--80ahefovus8e.lolscore 26· not probed yet
punycode name “кыздарнет scripts=CYRILLIC”TLD with a high abuse rate “lol”
Mediumxn--8jwo3kcz0b.topscore 26· no DNS
punycode name “陳欣然 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--8jwo3knv0b.topscore 26· boilerplate page
punycode name “陈欣然 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--8mq.topscore 26· not probed yet
punycode name “他 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--90w151awtv.topscore 26· no DNS
punycode name “管青海 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--93qy33jyma123b.topscore 26· no DNS
punycode name “茶菊優選 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--9i1bv46a5sgs3e.questscore 26· empty page
punycode name “파안니치 scripts=HANGUL”TLD with a high abuse rate “quest”
Mediumxn--9kq018c.topscore 26· not probed yet
punycode name “无云 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--9kq078c.icuscore 26· no DNS
punycode name “星云 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--9kq855f.topscore 26· no DNS
punycode name “無云 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--aeromxico-f4a.clickscore 26· active website
punycode name “aeroméxico scripts=LATIN”TLD with a high abuse rate “click”
Mediumxn--ai-s44fz37a.xyzscore 26· no DNS
punycode name “ai腾讯 scripts=CJK/LATIN”TLD with a high abuse rate “xyz”
Mediumxn--b-tu1c.topscore 26· not probed yet
punycode name “牛b scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--b0t92nb3o0ie.topscore 26· no DNS
punycode name “盈春建筑 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--b6q176d.funscore 26· blocked the probe
punycode name “共汇 scripts=CJK”TLD with a high abuse rate “fun”
Mediumxn--bnq875c7jn.topscore 26· no DNS
punycode name “码支付 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--bnq875c8zn.topscore 26· no DNS
punycode name “碼支付 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--cdigoful-v3a.xyzscore 26· empty page
punycode name “códigoful scripts=LATIN”TLD with a high abuse rate “xyz”
Mediumxn--chqq4h026e.topscore 26· not probed yet
punycode name “金万利 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--chrch-lva.xyzscore 26· excluded
punycode name “chürch scripts=LATIN”TLD with a high abuse rate “xyz”
Mediumxn--cjrz24bvkkvja.topscore 26· active website
punycode name “环球文化 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--cnq.topscore 26· not probed yet
punycode name “仙 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--diriodetrnsitoeviasgo-b0b4a.clickscore 26· active website
punycode name “diáriodetrânsitoeviasgo scripts=LATIN”TLD with a high abuse rate “click”
Mediumxn--doqy90dyzrx6c.topscore 26· no DNS
punycode name “東華股份 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--eg-1z5co54v.topscore 26· active website
punycode name “eg錢包 scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--eg-1z5cr40w.topscore 26· not probed yet
punycode name “eg钱包 scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--ehqs08h.xyzscore 26· no DNS
punycode name “三秋 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--elt79su09a.icuscore 26· no DNS
punycode name “郭显峰 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--ess202j.topscore 26· no DNS
punycode name “夜購 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--ess91ee14a.topscore 26· no DNS
punycode name “小夜猫 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--ess91evy9d.topscore 26· no DNS
punycode name “小夜貓 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--essq52j.topscore 26· no DNS
punycode name “夜购 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--fiqr7g74yd35b.lolscore 26· redirects elsewhere
punycode name “中银分期 scripts=CJK”TLD with a high abuse rate “lol”
Mediumxn--fiqx8ydrbh3dtu1aq79cr0o.topscore 26· no DNS
punycode name “長沙市奶龍中學 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--fiqx8ytpbj5dtu1a389ck1o.topscore 26· no web server
punycode name “长沙市奶龙中学 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--fjqa58fw76aeid658i.topscore 26· active website
punycode name “佳乐常安长乐 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--gmqt87c.topscore 26· no DNS
punycode name “旦人 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--gmqt87c.xyzscore 26· no DNS
punycode name “旦人 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--gqq.topscore 26· not probed yet
punycode name “但 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--gzr47h.topscore 26· active website
punycode name “啊姆 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--hit-1i7e51nmuxvihym3a.xyzscore 26· no web server
punycode name “童家堡hit检测 scripts=CJK/LATIN”TLD with a high abuse rate “xyz”
Mediumxn--hoq.topscore 26· not probed yet
punycode name “企 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--i2raa.topscore 26· blocked the probe
punycode name “喵喵喵 scripts=CJK”TLD with a high abuse rate “top”

Same data as JSON: /api/zone/risk?day=2026-11-05&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.