Flagged newborn domains, Thursday, September 17, 2026

11,750 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Low0w2nc5cqv1uh34.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low10287caminitotoronjo.xyzscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “xyz”
Low10sbsj3qhpvwue.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low16rrq9vw5l7wk0c.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low1c2x65qk1uaj3o.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low1c5tj6g24lepvky.xyzscore 13· no DNS
random-looking name “H=3.91”TLD with a high abuse rate “xyz”
Low1kjq3m5y7hslgq.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low1tcwgl8uorcjydp.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low1zrpnkdc9jve2x.xyzscore 13· no DNS
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Low23zbp0qy9apoml5.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low24hrplumbingkent.xyzscore 13· excluded
random-looking name “H=3.88”TLD with a high abuse rate “xyz”
Low28twvro0jmab1t.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low2g8m6ft5ax36why.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low2hx6mzs9v65yelg.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low2j0yx63tbcb82dm.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low2nf98zy4bxjyem.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low2xmzjcotn3ldbov.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low3f1xrzcuju782ji.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low3fpswn28kvgqi5.xyzscore 13· no DNS
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Low3gs4hrnb54z8rip.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low3l5zrpo8c6jiemo.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low3y0bp6a1mdzvwy.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low443vk7j1tdkyeil.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low4459jnhbz375lvo.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low457s9thv4kuxew.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low4cnhlderwtyf2p.xyzscore 13· no DNS
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Low4lky1wrhntkeo3l.icuscore 13· boilerplate page
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Low4nb6hzg03mwrhix.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low4y184jusqyx520c.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low50gfr7e9kv6ht3.xyzscore 13· no DNS
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Low50w4cl74nfdzqv1.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low56gjfsjw8ohaei.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low5h9p14qcub7qv8f.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Low5hyhl06ei3o7ns.xyzscore 13· no DNS
random-looking name “H=3.66”TLD with a high abuse rate “xyz”
Low5n1mj1qtksrngbc.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low653pyfwr7by1cd7.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
random-looking name “H=3.85”TLD with a high abuse rate “click”
random-looking name “H=3.97”TLD with a high abuse rate “click”
random-looking name “H=3.98”TLD with a high abuse rate “click”
random-looking name “H=3.65”TLD with a high abuse rate “click”
Low6gr9ypat05wkyt4.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low6mk23n6ixf1pt03.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low6rsh0kmou2py3i.xyzscore 13· no DNS
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Low6sztgd521akj7ce.xyzscore 13· no DNS
random-looking name “H=3.91”TLD with a high abuse rate “xyz”
Low6ybp958nrsclxz.xyzscore 13· no DNS
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Low6z17d5vghotu4l.xyzscore 13· no DNS
random-looking name “H=3.81”TLD with a high abuse rate “xyz”
Low72792nubkij6pvx.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low75c710hkt1dui8g.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low7bp8s6ph89a14zv.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Low7f2y4bnz50ze8pf.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-17&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.