Flagged newborn domains, Wednesday, September 9, 2026

9,947 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowhrz25qacp7l90su.topscore 13· boilerplate page
random-looking nameH=3.91TLD with a high abuse ratetop
Lowhx9tdqovncmcaln.icuscore 13· boilerplate page
random-looking nameH=3.64TLD with a high abuse rateicu
Lowjct7r5n3z9l6lrigvgt.cfdscore 13· no DNS
random-looking nameH=3.83TLD with a high abuse ratecfd
Lowjrgm53324osyzjoldm14.topscore 13· no web server
random-looking nameH=3.82TLD with a high abuse ratetop
Lowkc85kfnxdjts8eq.icuscore 13· boilerplate page
random-looking nameH=3.64TLD with a high abuse rateicu
random-looking nameH=3.98TLD with a high abuse ratecyou
Lowngb1kfrk6ns9tvy.icuscore 13· no web server
random-looking nameH=3.64TLD with a high abuse rateicu
Lowplsd2bgfalstda91gjk.icuscore 13· no web server
random-looking nameH=3.72TLD with a high abuse rateicu
Lowpx53324ztjvooerzkc15.topscore 13· no web server
random-looking nameH=3.92TLD with a high abuse ratetop
Lowpygh53324cndnjqbrg07.topscore 13· no web server
random-looking nameH=4.02TLD with a high abuse ratetop
Lowq2m7b4k1grngz9c.topscore 13· no DNS
random-looking nameH=3.77TLD with a high abuse ratetop
Lowqm1tymk1izlw8k6pv3wu.icuscore 13· no DNS
random-looking nameH=3.92TLD with a high abuse rateicu
Lowqv3zcb40xkzrsg3.icuscore 13· boilerplate page
random-looking nameH=3.64TLD with a high abuse rateicu
Lowrlh83nl9vpphfmkut2rfpnp.xyzscore 13· redirects elsewhere
random-looking nameH=3.74TLD with a high abuse ratexyz
Lowsjwgft546ar23kl.icuscore 13· blocked the probe
random-looking nameH=3.91TLD with a high abuse rateicu
Lowsjwgft546ar23kl.xyzscore 13· blocked the probe
random-looking nameH=3.91TLD with a high abuse ratexyz
Lowsnwz0nhjg5xiuv3.icuscore 13· empty page
random-looking nameH=3.77TLD with a high abuse rateicu
Lowstf5hn9pt2a403q.topscore 13· boilerplate page
random-looking nameH=3.77TLD with a high abuse ratetop
Lowt5n1j7c4grngv9b.topscore 13· no DNS
random-looking nameH=3.64TLD with a high abuse ratetop
Lowtn53324wsrqedxarly03.topscore 13· no web server
random-looking nameH=3.98TLD with a high abuse ratetop
Lowvw8xm2oteburhtq2mf88.cfdscore 13· no DNS
random-looking nameH=3.78TLD with a high abuse ratecfd
Loww0r6y3f8grngh2p.topscore 13· no DNS
random-looking nameH=3.64TLD with a high abuse ratetop
Lowwlp30g7nj1gjsm8.sbsscore 13· boilerplate page
random-looking nameH=3.64TLD with a high abuse ratesbs
Lowwn41mw2y79kgtbzl6bpiutxrl.cyouscore 13· no DNS
random-looking nameH=4.32TLD with a high abuse ratecyou
Lowx9j3v6d0lgrng5f.topscore 13· no DNS
random-looking nameH=3.77TLD with a high abuse ratetop
Lowxyz388-ampmobile.buzzscore 13· active website
random-looking nameH=3.64TLD with a high abuse ratebuzz
Lowy53324ydpgoemkmahh01.topscore 13· no web server
random-looking nameH=3.92TLD with a high abuse ratetop
Lowyz53324pxybgwohtwp11.topscore 13· no web server
random-looking nameH=3.82TLD with a high abuse ratetop
Lowz53324esxfykdnxejc09.topscore 13· no web server
random-looking nameH=4.02TLD with a high abuse ratetop
lure words (login, verify, secure…)winmany hyphens3
lure words (login, verify, secure…)winmany hyphens3
lure words (login, verify, secure…)service,services
Low12rprizes.comscore 12
lure words (login, verify, secure…)prize,prizes
lure words (login, verify, secure…)service,services
Low1kservices.comscore 12
lure words (login, verify, secure…)service,services
very long name28TLD with a high abuse ratecyou
Low30aguestservices.comscore 12· no DNS
lure words (login, verify, secure…)service,services
Low36da0eb19e01b79e389d8de169eafbec.topscore 12· boilerplate page
very long name32TLD with a high abuse ratetop
lure words (login, verify, secure…)service,services
Low41services.comscore 12
lure words (login, verify, secure…)service,services
very long name63TLD with a high abuse ratecfd
Low6c22a5a2bc6d3536ef70c87bce6f8bf5.cfdscore 12· boilerplate page
very long name32TLD with a high abuse ratecfd
Low6cde3ba396745adbac6490677c19d865.icuscore 12· boilerplate page
very long name32TLD with a high abuse rateicu
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowa957c4a3d82a5df954b9c32c9fac3da3.topscore 12· boilerplate page
very long name32TLD with a high abuse ratetop
Lowabhihomecareservices.comscore 12· active website
lure words (login, verify, secure…)service,services
Lowabnotaryservices.comscore 12· placeholder page
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowaboudtravelservices.sitescore 12· robots.txt denied
lure words (login, verify, secure…)service,services

Same data as JSON: /api/zone/risk?day=2026-09-09&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.