Flagged newborn domains, Thursday, November 12, 2026

11,793 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

punycode name “씨벳확실 scripts=HANGUL”random-looking name “H=3.62”
punycode name “씨벳타임 scripts=HANGUL”random-looking name “H=3.77”
Lowxn--tl3br8m9vb70i.comscore 23· no web server
punycode name “씨벳처음 scripts=HANGUL”random-looking name “H=3.77”
punycode name “씨벳환영 scripts=HANGUL”random-looking name “H=4.00”
punycode name “씨벳티켓 scripts=HANGUL”random-looking name “H=3.64”
punycode name “씨벳비트 scripts=HANGUL”random-looking name “H=3.64”
punycode name “씨벳예스 scripts=HANGUL”random-looking name “H=3.77”
punycode name “세무사추천 scripts=HANGUL”random-looking name “H=3.68”
Lowxn--v92b7y13gj8po9a.comscore 23· no DNS
punycode name “법무사추천 scripts=HANGUL”random-looking name “H=3.97”
punycode name “과천렉서 scripts=HANGUL”random-looking name “H=3.64”
punycode name “친절한이사장 scripts=HANGUL”random-looking name “H=3.79”
Lowxn--vh3bo2wiofk8a.techscore 23· not probed yet
punycode name “탈퇴방지 scripts=HANGUL”random-looking name “H=3.77”
Lowxn--vhqqb4yn0mywfco0a.wangscore 23· no DNS
punycode name “中国文化产业 scripts=CJK”random-looking name “H=3.83”
Lowxn--vhqr42dyp2a28b.xn--io0a7iscore 23· no DNS
punycode name “金轮木业 scripts=CJK”random-looking name “H=3.70”
punycode name “씨벳대박 scripts=HANGUL”random-looking name “H=3.77”
punycode name “四川茶花网 scripts=CJK”random-looking name “H=3.73”
Lowxn--wjqq7ecb780lexed6v.sitescore 23· no DNS
punycode name “全球乡村振兴 scripts=CJK”random-looking name “H=3.78”
punycode name “东方胜强 scripts=CJK”random-looking name “H=3.62”
Lowxn--xhq203bs0e7s5a.xn--vhquvscore 23· no DNS
punycode name “东方胜强 scripts=CJK”random-looking name “H=3.62”
Lowxn--xhq9m52oh6gc49aij7a.mobiscore 23· no DNS
punycode name “辽宁京东电商 scripts=CJK”random-looking name “H=4.01”
punycode name “丝路电商网 scripts=CJK”random-looking name “H=3.68”
Lowxn--zfr13mp4mvhgdlxs0u.shopscore 23· active website
punycode name “海外服务线路 scripts=CJK”random-looking name “H=4.12”
Lowxn--zfr792axjfkr0ap1q.shopscore 23· redirects elsewhere
punycode name “总服务线路 scripts=CJK”random-looking name “H=3.83”
punycode name “安康工程劳务平台 scripts=CJK”random-looking name “H=4.02”
punycode name “安康工程劳务平台 scripts=CJK”random-looking name “H=4.02”
punycode name “重庆新能源汽车 scripts=CJK”random-looking name “H=3.89”
Low6490eee.topscore 22· blocked the probe
TLD with a high abuse rate “top”login form “has_form+login words”
Low8763bbb.topscore 22· blocked the probe
TLD with a high abuse rate “top”login form “has_form+login words”
Low8763ggg.topscore 22· blocked the probe
TLD with a high abuse rate “top”login form “has_form+login words”
Lowa2m6rd04.cfdscore 22· active website
TLD with a high abuse rate “cfd”login form “has_form+login words”
Lowabtopupzone.topscore 22· active website
TLD with a high abuse rate “top”login form “has_form+login words”
Lowaf3bs5ii.cfdscore 22· active website
TLD with a high abuse rate “cfd”login form “has_form+login words”
Lowafterimage.fansscore 22· active website
page impersonates a brand “Apple ID”
Lowafterwards.carescore 22· active website
page impersonates a brand “Netflix”
Lowagey1zls.cfdscore 22· active website
TLD with a high abuse rate “cfd”login form “has_form+login words”
Lowajimom.topscore 22· active website
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”form submits over plain HTTP “http://ajimom.top/”
Lowalimnet.xyzscore 22· active website
TLD with a high abuse rate “xyz”login form “has_form+login words”
Lowallmovies.fitscore 22· active website
page impersonates a brand “Netflix”
Lowalphacovariance.comscore 22· active website
page impersonates a brand “BINANCE”
Lowamer-power.spacescore 22· active website
page impersonates a brand “IRS”
Lowandrewschwartz.studioscore 22· active website
page impersonates a brand “Netflix”
Lowangelpay.livescore 22· active website
page impersonates a brand “Binance”
Lowannaclothing.storescore 22· active website
page impersonates a brand “PayPal”
Lowannchousis.comscore 22· active website
page impersonates a brand “DHL”
Lowaquacount.clickscore 22· active website
TLD with a high abuse rate “click”login form “has_form+login words”
Lowautismsolutionpieces.orgscore 22· active website
page impersonates a brand “IRS”
Lowavasiting.workscore 22· active website
TLD with a high abuse rate “work”login form “has_form+login words”
Lowb9aqu34y.cfdscore 22· active website
TLD with a high abuse rate “cfd”login form “has_form+login words”
Lowbabyminhao.funscore 22· active website
TLD with a high abuse rate “fun”page pushes urgent payment “guaranteed returns”
Lowbestwhitelabelgoogleads.comscore 22echoes google· not probed yet
brand in the name “google”brand name at a retail registrar “GoDaddy.com, LLC”

Same data as JSON: /api/zone/risk?day=2026-11-12&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.