Flagged newborn domains, Thursday, September 3, 2026

12,129 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Low3c9qjvwgus8ad.xyzscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “xyz”
Low3t8hfdge1py09q.xyzscore 13· no web server
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
random-looking name “H=3.72”TLD with a high abuse rate “cyou”
Low4jmtn9ba5d71x.xyzscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “xyz”
Low4pg3qycv3dlm2umg.topscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “top”
Low4sxf7n2m1admt3.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low4t30h27pzvob9x.xyzscore 13· no web server
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Low4tlj8h0a9ymqqf.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low52m90r1p6hgcy.xyzscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “xyz”
Low531fjl-r4na6ot6-n5uc8w.livescore 13· no DNS
random-looking name “H=4.02”free DNS provider “dnsowl.com”
Low7192wbcmnvrtl.topscore 13· active website
random-looking name “H=3.70”TLD with a high abuse rate “top”
Low740qm0cxpduebu2.icuscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Low7fdwmj55xpa961.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low7fwlhgk420io5.xyzscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “xyz”
Low7h3pkd6c3lrj5i.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low894dj7gansk8lz.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low8g5j8deea4fo9cn.icuscore 13· empty page
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Low8pdftjzji2ye9g.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low9xktd1rsgm0zj.xyzscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “xyz”
Lowb49r1qa068ef5yo.icuscore 13· no DNS
random-looking name “H=3.91”TLD with a high abuse rate “icu”
Lowb6hlg1ogxnsyfq.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowbdghfywujersk.xyzscore 13· boilerplate page
random-looking name “H=3.70”TLD with a high abuse rate “xyz”
Lowbwtcpn126zilxo.xyzscore 13· no web server
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Lowbx38f5h3722ldayq.topscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “top”
Lowbzqpkr-76ccxvdm.cyouscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “cyou”
Lowc5v5t231b44ris6.sbsscore 13· boilerplate page
random-looking name “H=3.64”TLD with a high abuse rate “sbs”
Lowcfqbmzkiupr76h.xyzscore 13· no web server
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Lowcjtddw4fevmzl3.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowclgzm9ybkw1car.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowcy62vc3d1bufsj.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowcyxf5bn9qic3yt2.icuscore 13· boilerplate page
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Lowd7z0tbjovchx1.xyzscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “xyz”
Lowf0b34scuewyjz9.xyzscore 13· no web server
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Lowf8kdj329jce61n.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowfc8nmdxz2pcwau.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowfqg73xfix242jsaglw.onlinescore 13· no DNS
random-looking name “H=3.73”free DNS provider “dnsowl.com”
Lowft0y3df51uikn2.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowfycb5phtaxunqe.xyzscore 13· no web server
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Lowg9m1v7d0du5qp6.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowghjzc9w9i6wx1f3.icuscore 13· empty page
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Lowglyphcoinstake.xyzscore 13· not probed yet
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Lowglyphstackcore.xyzscore 13· not probed yet
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowglyphvaultcore.xyzscore 13· not probed yet
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowh06sgh3skwae4yanzn.xyzscore 13· no DNS
random-looking name “H=3.73”TLD with a high abuse rate “xyz”
random-looking name “H=3.99”TLD with a high abuse rate “cfd”
Lowhb2w6lf0owrsac.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowhg23bhm8risect.xyzscore 13· no web server
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Lowhn7d06fuyrpbe.xyzscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “xyz”
Lowhqzdm-76ccvnjxr.cyouscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “cyou”
Lowhs7lg1p9rizfb.xyzscore 13· no web server
random-looking name “H=3.70”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.