Flagged newborn domains, Friday, August 28, 2026

9,218 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowry3t0-hn49z-ihkdxw.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowrz9qwpktgw7g-cx43j3e1.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lows5r1j-gco1p-ntiaug.workscore 13· no web server
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowsmmnql1v2rl-gew43hfme.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Lowszwf7-rl60g-ymykzv.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowt7j04-vl383-aqkmng.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowt8kn9-xisad-tclqez.workscore 13· no web server
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowtjqxvtp21yql-hbskfxm7.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowtkx25-7wua7-jnjvcc.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowtzy2htg2moe4-fqbsmx75.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowv241m-44z8o-ywbhut.workscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “work”
Lowv24n30nyyh8f-wf3tvcer.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Lowv9qq1kjk1m3-hl1v5at8n.cyouscore 13· no DNS
random-looking name “H=3.78”TLD with a high abuse rate “cyou”
Lowvcq1js43p5ko-1mwxblcv.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowvg8dz-dz76l-uswwfc.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowvrmltnw79lr6e-x9m0w9h.cyouscore 13· no DNS
random-looking name “H=3.68”TLD with a high abuse rate “cyou”
Lowvvfm6-b112i-gwdybl.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Loww07jgfj85sds-fusgahuv.cyouscore 13· no DNS
random-looking name “H=3.68”TLD with a high abuse rate “cyou”
Loww74rlp1x4a0w-5jceattc.cyouscore 13· no DNS
random-looking name “H=3.82”TLD with a high abuse rate “cyou”
Loww8k5j-la6io-lwcbxj.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowwdxm26hd8cl-ggxk25f9u.cyouscore 13· no DNS
random-looking name “H=3.92”TLD with a high abuse rate “cyou”
Lowwh7nj-hdptn-beaoex.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowwjh7b8cgy1nj-en5m52p0.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowwvj6d-yqkdn-pmpouj.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowwwg656c196lpz56zxogtbynxc.cyouscore 13· no DNS
random-looking name “H=3.84”TLD with a high abuse rate “cyou”
Lowwzf4rj8r54kv6xip7q.cfdscore 13· no DNS
random-looking name “H=3.95”TLD with a high abuse rate “cfd”
Lowx43s7mf2bpnt-zw2uxsv5.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowx64pq1w3gebhbe2.icuscore 13· empty page
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Lowx74sy-wxhmw-qceihd.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowxckbmhrnanzdlt.topscore 13· active website
random-looking name “H=3.66”TLD with a high abuse rate “top”
Lowxq1z9yhwh98n-6wycoa3d.cyouscore 13· no DNS
random-looking name “H=3.92”TLD with a high abuse rate “cyou”
Lowxtwj3zuoab4tn-l3mfk9o.cyouscore 13· no DNS
random-looking name “H=4.02”TLD with a high abuse rate “cyou”
Lowxwyn7072ghaoekpkhbwj.topscore 13· no DNS
random-looking name “H=3.92”TLD with a high abuse rate “top”
Lowy5tvh-p4k39-qydftz.workscore 13· no web server
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowy8sl4-j3gi5-bbcvjc.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowy97l0-heu0a-hygtrj.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowyjc4mlknx9y6-lpxfvef1.cyouscore 13· no DNS
random-looking name “H=3.92”TLD with a high abuse rate “cyou”
Lowymgsm-kqisd-uvxibf.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowymrtp-lnw9d-dzwufz.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowysx1xl12suxc-zn42easw.cyouscore 13· no DNS
random-looking name “H=3.65”TLD with a high abuse rate “cyou”
Lowytp0m-kl7cq-yohpxw.workscore 13· no web server
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowz1n56-kuqlg-rstalu.workscore 13· no web server
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowz7prjn73958vw-kjqlh79.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Lowz9f03-z3squ-omwhiy.workscore 13· no web server
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowzhbq8-shcqj-ipygew.workscore 13· no web server
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowznt7223704jvxlbfsqv.topscore 13· no DNS
random-looking name “H=3.93”TLD with a high abuse rate “top”
Lowznzv2-cwe2s-upfjeh.workscore 13· no web server
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowzwj5g-pr9so-ndbjmc.workscore 13· no web server
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowzxcdfkmpwurewqs.xyzscore 13· boilerplate page
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Lowzy5y27zn2yox-vgbpuhd7.cyouscore 13· no DNS
random-looking name “H=3.78”TLD with a high abuse rate “cyou”

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.