Flagged newborn domains, Thursday, November 12, 2026

11,793 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowxn--wkraa.spacescore 18· no DNS
punycode name “卍卍卍 scripts=CJK”
Lowxn--wlq907c.comscore 18
punycode name “文产 scripts=CJK”
Lowxn--wlr398c.comscore 18
punycode name “水印 scripts=CJK”
Lowxn--wlr398c.sitescore 18· no DNS
punycode name “水印 scripts=CJK”
Lowxn--wv3bp84b.comscore 18· no DNS
punycode name “험블 scripts=HANGUL”
Lowxn--wxwo86f.xn--io0a7iscore 18· no DNS
punycode name “洁锐 scripts=CJK”
Lowxn--xeln-ira.comscore 18
punycode name “xeløn scripts=LATIN”
Lowxn--xhq59s.comscore 18
punycode name “东国 scripts=CJK”
Lowxn--xhq59srwm.comscore 18· no DNS
punycode name “新东国 scripts=CJK”
punycode name “东方字礼 scripts=CJK”
Lowxn--xhqp98cfzndif.comscore 18· no DNS
punycode name “东方礼经 scripts=CJK”
Lowxn--xitoycarrera-9db.sitescore 18· no DNS
punycode name “éxitoycarrera scripts=LATIN”
Lowxn--y71an33a.vipscore 18· empty page
punycode name “虎门 scripts=CJK”
punycode name “yb아트센터 scripts=HANGUL/LATIN”
Lowxn--ycv.spacescore 18· no DNS
punycode name “敛 scripts=CJK”
punycode name “圣迈德 scripts=CJK”
punycode name “yenisehirapartyonetımı scripts=LATIN”
Lowxn--yeto9c.comscore 18
punycode name “小平 scripts=CJK”
Lowxn--yhdistlainat-lcb.netscore 18· registrar placeholder
punycode name “yhdistälainat scripts=LATIN”
punycode name “爱丝袜 scripts=CJK”
Lowxn--yi1a.shopscore 18· no DNS
punycode name “苣 scripts=CJK”
Lowxn--yitr54m.comscore 18
punycode name “鹭岛 scripts=CJK”
punycode name “yıldızsanat scripts=LATIN”
Lowxn--yun-dma.storescore 18· boilerplate page
punycode name “yuné scripts=LATIN”
punycode name “奶蛙师范学院 scripts=CJK”
Lowxn--z-73a.comscore 18
punycode name “ʌz scripts=LATIN”
punycode name “이엔이건설 scripts=HANGUL”
punycode name “舒雅达 scripts=CJK”
Lowxn--zel-rna.storescore 18· robots.txt denied
punycode name “özel scripts=LATIN”
Lowxn--zfr188b8jrm2n.shopscore 18· redirects elsewhere
punycode name “服务线路 scripts=CJK”
punycode name “zontesespaña scripts=LATIN”
punycode name “özortaklar scripts=LATIN”
punycode name “西爵士 scripts=CJK”
punycode name “爱骑士 scripts=CJK”
Lowxn--zrich-kva.businessscore 18· boilerplate page
punycode name “zürich scripts=LATIN”
punycode name “zørion scripts=LATIN”
Lowxn--zsss73a.comscore 18
punycode name “失望 scripts=CJK”
Lowxn--zyvr-ira.comscore 18
punycode name “zyvør scripts=LATIN”
Lowzvezdy-dzhungli-3sezon-7seria.sbsscore 18· active website
many hyphens “3”very long name “29”TLD with a high abuse rate “sbs”
Lowzvyozdy-v-dzhunglyah-7vypusk.sbsscore 18· active website
many hyphens “3”very long name “28”TLD with a high abuse rate “sbs”
very long name “60”random-looking name “H=3.87”TLD with a high abuse rate “click”
Lowhttpsruangliterasidigitalmikhail.sbsscore 17· active website
very long name “32”random-looking name “H=3.62”TLD with a high abuse rate “sbs”
Lowjsppmx3wtfz4d8wyvxa64r2e20yhuj.cfdscore 17· empty page
very long name “30”random-looking name “H=4.44”TLD with a high abuse rate “cfd”
very long name “44”random-looking name “H=4.43”TLD with a high abuse rate “top”
Lowpl-8262627l273782oferta0928h37393937.sbsscore 17· no web server
very long name “36”random-looking name “H=3.64”TLD with a high abuse rate “sbs”
Low01cf7w9bt0bj59n.icuscore 16· no web server
TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”
Low11229999group.cfdscore 16· no DNS
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1231133group.topscore 16· no DNS
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Low123683467.xyzscore 16· boilerplate page
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”
Low13sd2.cfdscore 16· placeholder page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-11-12&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.