Flagged newborn domains, Thursday, August 27, 2026

17,538 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

random-looking name “H=3.79”TLD with a high abuse rate “cfd”
random-looking name “H=3.79”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.64”TLD with a high abuse rate “cfd”
random-looking name “H=3.79”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.79”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.79”TLD with a high abuse rate “cfd”
random-looking name “H=3.79”TLD with a high abuse rate “cfd”
Lowx36wm-f8wp2-wjshbd.workscore 13· not probed yet
random-looking name “H=3.70”TLD with a high abuse rate “work”
Lowx37pl2jxh8yixbpftg-md.cyouscore 13· no DNS
random-looking name “H=3.98”TLD with a high abuse rate “cyou”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
Lowx6vpj-jun06-ebwegf.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowx6z65-7bio0-udarki.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowx7hh5-9jdrk-mtupzu.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowx8xwvgf1oj9lcjz09-zu.cyouscore 13· no DNS
random-looking name “H=3.83”TLD with a high abuse rate “cyou”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
random-looking name “H=3.68”TLD with a high abuse rate “cfd”
Lowxb0t3-yi4el-blafih.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxbxl8xt6b2defo3gmc-vl.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Lowxc4kz-yltcp-dynpiw.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxc5gtg1hp8-onxwh9gdoa.cyouscore 13· no DNS
random-looking name “H=3.78”TLD with a high abuse rate “cyou”
Lowxd2pwmut0c7-emu479dtl.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Lowxd48y-5qit0-kretgl.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowxd4y4-wdcti-hpzjmw.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxdljg4aizp-2ehs2izv58.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowxdrgp-zqwxt-neulnq.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxfh82-qrw6o-luzwyu.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowxfpr9-kabtw-bhhdts.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxgbll-zcr32-dyxopy.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxh7nw-n0nqs-gyuktr.workscore 13· not probed yet
random-looking name “H=3.70”TLD with a high abuse rate “work”
Lowxkhq3p1iyvn-p63u.topscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “top”
Lowxkw7lvng3ci-6zpc9jo7i.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowxlwk4-q73pk-blzmue.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowxmwtq8bdvc27oskcx6-a1.cyouscore 13· no DNS
random-looking name “H=4.12”TLD with a high abuse rate “cyou”
Lowxn4cv-57h9k-jnvyst.workscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowxq8f9-mt6m6-htulze.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxqd17-ns384-gfyooe.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowxr50hwavqio-cgh0.topscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “top”
Lowxr80w-t2ndd-vmkyps.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowxr9wd-zmhnd-mijbyw.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxrw072lm4n8-4g76.topscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “top”

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.