Flagged newborn domains, Thursday, August 27, 2026

17,538 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Low9kpnx-5lof2-cyfdsz.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low9lhhn-ktjds-nzoymv.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9lx0p-6aivn-xywfpj.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9q1ht-xa1g9-crvzbb.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9qqsf-x2o5g-gwrztw.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9rddl-2bsc4-mgvjkt.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low9rzmd-37n60-egcuxu.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low9s78l-gtc9s-cawqmd.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9tq1p-mpfph-wizgar.workscore 13· not probed yet
random-looking name “H=3.70”TLD with a high abuse rate “work”
Low9v8x3-6u94k-mlfgwm.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9vx4rm6pwsndnqo68-loh.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Low9w8zt-k6jm0-ydtrmo.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9xybvdojnu-oux1u75621.cyouscore 13· no DNS
random-looking name “H=3.78”TLD with a high abuse rate “cyou”
Low9zkdm-t3rmq-eakpjr.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9zm80-dpst8-xfliid.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowb07qy-9y3gt-rluocn.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowb0d72-nhdrz-gycgwi.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowb13rydzpqbrr4xbn64-h3.cyouscore 13· no DNS
random-looking name “H=3.65”TLD with a high abuse rate “cyou”
Lowb16l7-0w4xq-fciqlx.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Lowb3smkw6aj3d07p-prfg74.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowb5j80-0l1rd-upgphl.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowb61q082ai8lb6ze1s5-fs.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Lowb66td-xavha-szwnfm.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowb7h3ynpsc20qz7746o-gh.cyouscore 13· no DNS
random-looking name “H=3.98”TLD with a high abuse rate “cyou”
Lowb931r-t9b0i-wjekyo.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowb9kns-p8x8u-gyemrm.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowb9rq5-zj2am-sdygpi.workscore 13· not probed yet
random-looking name “H=4.00”TLD with a high abuse rate “work”
Lowbb9zwc1ac6exdo98vz-78.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Lowbbp77-88owe-qhydzk.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbc9lj-ho8y2-ttqlbf.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbdkv4-9urwf-damtug.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbh583-k2ien-kvuzfw.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowbj0wdw8geq0-h4j30g9kb.cyouscore 13· no DNS
random-looking name “H=3.68”TLD with a high abuse rate “cyou”
Lowbj7x5-q6p3w-lkvyvb.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbjd1r5f2todnf6j2vc-y5.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Lowbjjn3f7f9q600mtw9o-vd.cyouscore 13· no DNS
random-looking name “H=3.92”TLD with a high abuse rate “cyou”
Lowbjsnm-8vz2e-zxpbjr.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbkzdf-pb54n-yuepmv.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbmvpc1nucnhen4f598-20.cyouscore 13· no DNS
random-looking name “H=3.98”TLD with a high abuse rate “cyou”
Lowbmzgq-1fyk7-rjuqlg.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbmznt-b084o-dksnao.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbng43-nccwu-mzijif.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbpjcw-pmtyg-sdnvhl.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowbpqw3-p4htb-wxdigm.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbq-w8qw6os2v86o3pylep.cyouscore 13· no DNS
random-looking name “H=3.72”TLD with a high abuse rate “cyou”
Lowbqy5d-1hsm7-tdekne.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbrd5c-3zpeg-gdmjrk.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbtg192jcrv8cbx1h9v-dn.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Lowbtvn983lxq-fv91dso7le.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.