Flagged newborn domains, Friday, September 25, 2026

11,420 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowzs777j.appscore 14· active website
page pushes urgent payment “Claim Your Bonus”
Low008dx-mk54p-ggoxqu.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low01v66-h8ixy-rtqckm.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low026nm-0vyak-zbjmfp.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low03lg6-6de4f-scetay.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low05nv3-qztrd-unxpvl.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low08336-ljc21-uzozqp.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low08qjw7ysjd126aae2e0iyn-e.lolscore 13· no web server
random-looking name “H=3.88”TLD with a high abuse rate “lol”
Low096t7-zjesv-vbcxgr.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low0gmvj-17s9m-zivobj.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low0j5rd-dqn0n-bscfva.workscore 13· boilerplate page
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low0j92w-bs6p5-gbvgzu.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low0jhfp-x8tw8-qrtnof.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low0jyby-2zb5s-jecdvr.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low0k05b-3poeb-ghuatv.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low0k2sj-z1y0w-dftphe.workscore 13· excluded
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low0k5rv-5f6ej-ajqzgt.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low0k69s-k91al-qjubxi.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low0k8q7-fqyi9-ohfesz.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low0kg8d-sos54-bkaaxj.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low0kgwl-h4ybo-diviyj.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low0l1gt-ggd2j-nuxcaz.workscore 13· excluded
random-looking name “H=3.70”TLD with a high abuse rate “work”
Low0lf1v-7lh8t-yuyagd.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low0mtkx-vrlcc-wqbanb.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low0my42-g7e33-yhxuwp.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low0pc71-zj8qg-aqcdyl.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low0qjrs-9lgto-cgrbal.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low0qt5g-5yxda-qujzvu.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low0r8lc-bp992-kkqecf.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low0shql-m9f8k-hpwvbc.workscore 13· boilerplate page
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low0v3pn-y01mc-fgwtzj.workscore 13· boilerplate page
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low0vq7d-7ewn1-sqcrsy.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low0wb8q-4fkxi-oizvsn.workscore 13· boilerplate page
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low0wsgh-kir3y-yneypf.cyouscore 13· no DNS
random-looking name “H=3.70”TLD with a high abuse rate “cyou”
Low0y116-yjkqn-twlcqm.workscore 13· boilerplate page
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low10c7z-3y8aj-rybowy.cyouscore 13· no DNS
random-looking name “H=3.70”TLD with a high abuse rate “cyou”
Low10h4c-dr5vc-qcbizw.workscore 13· boilerplate page
random-looking name “H=3.70”TLD with a high abuse rate “work”
Low10lhh-v55g7-dwixtv.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low10rmd-wwp4f-joosag.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low10w3m-v6m22-nuutzq.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low149ff-xss38-dcayrl.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low14bn8-3t9ia-lkxsst.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low14rj8-wrn6v-jkukhm.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low17qx7-yfo58-initch.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low186gk-fq498-jpypsq.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low18h4f-pvmsx-seubcl.workscore 13· excluded
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low18pvn-1eu0k-hgswra.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low18rfc-tot60-kyyeqp.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low18rzr-b2q7f-tpxbql.workscore 13· boilerplate page
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low195pt-bmgm9-rwnvdf.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”

Same data as JSON: /api/zone/risk?day=2026-09-25&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.