Flagged newborn domains, Thursday, November 12, 2026

3,810 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumxn--kwra289p.topscore 26· boilerplate page
punycode name “海哥哥 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--l5xx19c.topscore 26· no web server
punycode name “路狗 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--lcyp92c.xyzscore 26· no web server
punycode name “试玩 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--m8t.xyzscore 26· no DNS
punycode name “思 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--miqx83o.xyzscore 26· no DNS
punycode name “银临 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--mkr845m.topscore 26· no DNS
punycode name “千門 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--mkrw46m.topscore 26· boilerplate page
punycode name “千门 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--mnqv9qzv2b.xyzscore 26· no web server
punycode name “代茶园 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--nb-6d6cp54l.topscore 26· blocked the probe
punycode name “原神nb scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--nds36h6xc614g.topscore 26· no DNS
punycode name “平安集團 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--ng28-yo4g.topscore 26· not probed yet
punycode name “ng28圈 scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--ng28-yo4g.xyzscore 26· not probed yet
punycode name “ng28圈 scripts=CJK/LATIN”TLD with a high abuse rate “xyz”
Mediumxn--nib-9na0w.xyzscore 26· empty page
punycode name “niúbī scripts=LATIN”TLD with a high abuse rate “xyz”
Mediumxn--o39au8jj0immag94bgyu.bondscore 26· robots.txt denied
punycode name “유학가는방법 scripts=HANGUL”TLD with a high abuse rate “bond”
Mediumxn--pc-xm7ji6ekut.bondscore 26· placeholder page
punycode name “pc아이템 scripts=HANGUL/LATIN”TLD with a high abuse rate “bond”
Mediumxn--pss072d7sc1x0a.topscore 26· boilerplate page
punycode name “眼角大王 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--q41a7c.topscore 26· no DNS
punycode name “蘇藝 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--qpr88z.topscore 26· boilerplate page
punycode name “叶总 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--qprt1z.funscore 26· active website
punycode name “忧叶 scripts=CJK”TLD with a high abuse rate “fun”
Mediumxn--rcyygv59dyfj.funscore 26· active website
punycode name “环球阅读 scripts=CJK”TLD with a high abuse rate “fun”
Mediumxn--rk3as6q.topscore 26· no DNS
punycode name “貴陽 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--rss73m.topscore 26· boilerplate page
punycode name “御天 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--rssa9k189a.xyzscore 26· active website
punycode name “天天抽奖 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--s6wt1vuwe.xyzscore 26· active website
punycode name “神游网 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--sqrr13b.topscore 26· boilerplate page
punycode name “昏君 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--t93a.topscore 26· active website
punycode name “逡 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--tbxw67f.topscore 26· no DNS
punycode name “滅霸 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--top1-3m6fp6sokq113e.topscore 26· not probed yet
punycode name “南宫top1体育 scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--top1-3m6fp6sokq113e.xyzscore 26· not probed yet
punycode name “南宫top1体育 scripts=CJK/LATIN”TLD with a high abuse rate “xyz”
Mediumxn--top1-ut0gv55bl96dey2b.topscore 26· not probed yet
punycode name “南宮top1體育 scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--trkiye-3ya.topscore 26· active website
punycode name “türkiye scripts=LATIN”TLD with a high abuse rate “top”
Mediumxn--u1s023ejzu.xyzscore 26· no DNS
punycode name “鞠婧祎 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--vgu5u83es69a.topscore 26· no DNS
punycode name “我愛擼管 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--vhq3mo7is7x.topscore 26· no DNS
punycode name “文化产业 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--vlqt04a.topscore 26· robots.txt denied
punycode name “小亦 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--voru8x.xyzscore 26· active website
punycode name “变强 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--w9q07a06pj0k.topscore 26· not probed yet
punycode name “南宫凯旋 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--w9q07a06pj0k.xyzscore 26· not probed yet
punycode name “南宫凯旋 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--wm6amt.xyzscore 26· not probed yet
punycode name “魚鱗 scripts=CJK”TLD with a high abuse rate “xyz”
Mediumxn--wnuy2dvzsfgj.topscore 26· no DNS
punycode name “我爱撸管 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--xhq302n.topscore 26· robots.txt denied
punycode name “逊东 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--xnxo14f.topscore 26· boilerplate page
punycode name “灭霸 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--y-my4c.topscore 26· boilerplate page
punycode name “秋y scripts=CJK/LATIN”TLD with a high abuse rate “top”
Mediumxn--y9qw7a96p6zk.topscore 26· not probed yet
punycode name “南宮凱旋 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--yet150bpha504ai0ax2n12i.icuscore 26· no DNS
punycode name “流眼泪的小网站 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--yetu3mv2v.topscore 26· active website
punycode name “小科技 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--yf1atg.topscore 26· boilerplate page
punycode name “苏艺 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--yj0au7j.topscore 26· no DNS
punycode name “葉總 scripts=CJK”TLD with a high abuse rate “top”
Mediumxn--zl2bt3y2rhv3b.questscore 26· active website
punycode name “우타트런 scripts=HANGUL”TLD with a high abuse rate “quest”
Mediumzechtechsolutionslimited.shopscore 26· active website
lure words (login, verify, secure…) “limited”brand in page title, not in the name “namecheap”

Same data as JSON: /api/zone/risk?day=2026-11-12&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.