Flagged newborn domains, Friday, September 25, 2026

11,420 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Low19w5x-hf06f-tqrtys.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low1b2z2vmx4oenlnh-tx.cfdscore 13· empty page
random-looking name “H=3.73”TLD with a high abuse rate “cfd”
Low1br5y-p3mxl-fiqxqu.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low1fvdv-f963w-ehagnj.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low1j5jn-136yo-slmcog.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low1k49t-t05y2-zqusdj.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low1lvmv2sdbotaa6u.clickscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “click”
Low1m3fw-l28pg-cieuax.workscore 13· excluded
random-looking name “H=4.00”TLD with a high abuse rate “work”
Low1m4hx-pf6ta-ebjboy.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low1p251-rbcc6-rqfzhi.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low1qh8h-tcmp9-kxvngm.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low1rlny-t512k-smyavc.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low1s4fd-mks4h-auobrc.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low1yq89-bhmjr-zdqxlu.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low1ys36-hwont-wxkzzr.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low1zx8m-0aaqo-blwdwg.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low20rs9-5cger-lvdunm.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low212nd-pewyo-xagxck.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low21l73-pc54j-hwycby.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low225z3-t4m9m-nvakyu.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low23tjm-wn7ok-tlpcgm.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low23wgs-qsbl5-fkilfc.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low253zt5eznzuqywxx0vmi.topscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “top”
Low25n8d-v0od6-cjvsxo.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low25wvc-xd2w0-ibaxpz.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low27pl0-k0219-bgosah.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low27s8k-rva7o-fhucor.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low288k5-9xrzt-jfevfz.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low29125-jwsrf-rbnkqu.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low2btdx-4z4vm-iudwwp.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low2c068-bf93t-bzclfy.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low2cnwj-m3xky-jduzdz.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low2dfn2-zw81p-hwelbk.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low2fbx0-tw2ks-yaqikp.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low2h7r7-6n3ec-uysavb.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low2j8dt-9v0i3-jvmyey.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low2jkbt-jcqa2-lthwog.workscore 13· boilerplate page
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low2jql5f5ahokqzin5gajn.topscore 13· no DNS
random-looking name “H=3.68”TLD with a high abuse rate “top”
Low2k2cv-b5ts1-wuqjxp.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low2kp7r-vv8fm-eluyyk.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low2mth0-j8hyp-xzetra.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low2n6yl-4z2sr-vjuibo.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low2nmzb-hilbg-vjntuh.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low2p1t4-djr66-bzmhzh.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low2plkq-qezro-cylgwn.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low2rn0h-vxxfc-olzgsk.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low2rw1b-fzctt-jlwniz.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low2s95y-fsuwl-ftvvxn.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low2sgt6-pu294-qxytis.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low2sx6k-8tisc-tmbgjf.workscore 13· boilerplate page
random-looking name “H=3.75”TLD with a high abuse rate “work”

Same data as JSON: /api/zone/risk?day=2026-09-25&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.