Flagged newborn domains, Friday, August 28, 2026

9,218 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Low97b0r-y8kiy-hbeswe.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9ns9kbjir4zz-5indhzfm.cyouscore 13· no DNS
random-looking name “H=3.78”TLD with a high abuse rate “cyou”
Low9q44j-lf630-eabtrv.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low9rkmmqelhun0-4r0ein4u.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low9z7ydbx3kj4x-0ut9vhwc.cyouscore 13· no DNS
random-looking name “H=4.12”TLD with a high abuse rate “cyou”
Lowb63c40iohrnv-9zbkd6tg.cyouscore 13· no DNS
random-looking name “H=4.12”TLD with a high abuse rate “cyou”
Lowb7yq5-dm8te-zcjtxm.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbft7n7goun89-cittguw1.cyouscore 13· no DNS
random-looking name “H=3.68”TLD with a high abuse rate “cyou”
Lowbg09w-lozl1-xxsueu.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbgtyhncdewsxzaq.xyzscore 13· boilerplate page
random-looking name “H=3.91”TLD with a high abuse rate “xyz”
Lowbkdlv-8av7j-qnvrmi.workscore 13· not probed yet
random-looking name “H=3.70”TLD with a high abuse rate “work”
Lowbsgzyhjk898fdu.cyouscore 13· server error
random-looking name “H=3.66”TLD with a high abuse rate “cyou”
Lowby6l3wx9a0xk-b36nf1uy.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Lowc89j0-kd0oy-qsknar.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowch9w8x5x3eazaj4.icuscore 13· boilerplate page
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Lowcmbwsdyjzp3g-z20dgevj.cyouscore 13· no DNS
random-looking name “H=3.92”TLD with a high abuse rate “cyou”
Lowcnmvfrts5928173.xyzscore 13· active website
random-looking name “H=3.91”TLD with a high abuse rate “xyz”
Lowcph3qneycxf0-rl2a922d.cyouscore 13· no DNS
random-looking name “H=3.98”TLD with a high abuse rate “cyou”
Lowcr7pw-6nnoj-otxypm.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowcrgllhakwfvr4te.xyzscore 13· boilerplate page
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Lowcsvd2-l1jvm-teitch.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowcydnf-63004-vfcwqj.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowczj8k-h022s-phywxu.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowd01p5-rd8vt-ssyuoq.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowd16rl81t7w9b-4hp183kq.cyouscore 13· no DNS
random-looking name “H=3.98”TLD with a high abuse rate “cyou”
Lowd17yq-mfpia-hrjydi.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowddkc1gly5001c-4c9pvec.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Lowdlpqk08912kzuhrhnxi.topscore 13· boilerplate page
random-looking name “H=4.04”TLD with a high abuse rate “top”
Lowdthjg6cwqjb2-tntbp8wy.cyouscore 13· no DNS
random-looking name “H=3.78”TLD with a high abuse rate “cyou”
Lowdtjht2abhr9r-zcsoe5kx.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowdzhynslendyukreintov.buzzscore 13· no DNS
random-looking name “H=3.78”TLD with a high abuse rate “buzz”
Lowf1090-8gzh3-wviehc.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowf50znp1mvgsjzx4.icuscore 13· empty page
random-looking name “H=3.77”TLD with a high abuse rate “icu”
Lowf9qpqc4eevi7mrug81pkby9tp.cfdscore 13· active website
random-looking name “H=4.21”TLD with a high abuse rate “cfd”
Lowfcyy70i2mknz2shdlw.lolscore 13· no DNS
random-looking name “H=3.95”TLD with a high abuse rate “lol”
Lowfkcq518176mpicriypjv.topscore 13· boilerplate page
random-looking name “H=3.92”TLD with a high abuse rate “top”
Lowfpybc-z2j6g-kpmlay.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowfv11g-ssd9k-yaebrl.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowfyw3y-dlqu0-wvlrgc.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowg34k6-m1inm-wgzyju.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowgbmpz509wgtm-ed7f79e5.cyouscore 13· no DNS
random-looking name “H=3.72”TLD with a high abuse rate “cyou”
Lowgcdkf9u7jbal-5b1ehb6h.cyouscore 13· no DNS
random-looking name “H=3.98”TLD with a high abuse rate “cyou”
Lowgn2g5wadvlu-15curlc3z.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Lowgxhkjbunc2lq-e20fiv81.cyouscore 13· no DNS
random-looking name “H=4.22”TLD with a high abuse rate “cyou”
Lowgxtdy-crve5-syzdfp.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowhb54sfjh2bvl-vdei7pqw.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowhb6gk-71hdc-lluznm.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowhdtxk-s07sf-crbdtn.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowj4z0q-1pc9s-lswitt.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowj5tbb-26q4f-ogynyc.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.