Flagged newborn domains, Wednesday, September 30, 2026

10,685 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Low9325yxcvbnmqaz.topscore 13· suspended
random-looking name “H=3.81”TLD with a high abuse rate “top”
Low97f72-gxesc-lkchtu.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9814rfvtgbyhnu.topscore 13· suspended
random-looking name “H=3.81”TLD with a high abuse rate “top”
Low98cy8-fur63-weusga.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low98scy-mdmwv-cvzegr.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low98w7g-230bt-rrrzpy.workscore 13· excluded
random-looking name “H=3.70”TLD with a high abuse rate “work”
Low99fc6-wy3tn-idghnj.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low99xhg-228d5-syyqpo.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9ddg2-saynm-mnevfp.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9fpcg-2s6v5-gkpnef.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9fqqxlhki9wz7ej3.cfdscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cfd”
Low9gr47-3du2a-erzanc.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9h-bmd51dawflmc6ybufm8.lolscore 13· empty page
random-looking name “H=3.88”TLD with a high abuse rate “lol”
Low9hjkq-lr131-yhddfe.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9hvwd-1qvmx-cnktyf.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low9hy2b-cech8-flknka.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9kn5c-1jxv0-lkuxob.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9m69j-k1wm4-lvohcl.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9ptfh-17a6d-ymxkhb.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low9pvfs-zxfs4-okawnb.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9rj7z-tjfiu-atyuen.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9rz0w-6b56g-elbdhj.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Low9t3b892vqybkjea.icuscore 13· not probed yet
random-looking name “H=3.64”TLD with a high abuse rate “icu”
Low9w4vb-63kyz-hzqozg.workscore 13· excluded
random-looking name “H=3.70”TLD with a high abuse rate “work”
Low9wrk5-xe8je-tzifnq.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Low9yb77-g0bz8-zrwptl.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Low9yh3f-prkbp-tdlasq.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowb0q8g-2pwmd-zavcyq.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowb1l2g-t4xtz-hnpker.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowb3hlr-p9dag-kuresg.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowb4dbs-zucjk-pezohk.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowb4jxt-g49l8-jucnaf.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowb7xw5-nyvjx-renqym.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowb8g9p-va65r-xkvrhe.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowb9gbm-45li5-akxswf.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowb9z07-21yvm-bcuipd.workscore 13· excluded
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowb9z50-k3zib-jdxlgs.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbfwqs-wclru-jzxckd.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbk7tl-v9zre-ouhfzg.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowbm6r7-c4vde-grwcye.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbm6z8-p1w8c-hjoeux.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowbn7f2-6h8hr-cxxcoi.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbn841-3f77b-ppdzqa.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbndb5-zqoql-fsatgd.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbpmd1-6hsk7-xvnyyo.workscore 13· excluded
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowbr5rs-y0om1-siouet.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbr7l8-x7rnc-tvjmzp.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbtc2p-bn1jm-jtzrwf.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowbxbtq-7umh8-ceafmn.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowbyv5l-60kel-pfkajq.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”

Same data as JSON: /api/zone/risk?day=2026-09-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.