Flagged newborn domains, Friday, October 30, 2026

11,861 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowzlbn6qiquk-cyxtqkhi.cyouscore 13· no DNS
random-looking name “H=3.68”TLD with a high abuse rate “cyou”
Lowzmk33pf2ejc4tow.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Lowzmlrx-s1vig-uozgfe.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowzn0dy-t3q82-pkrkph.workscore 13· not probed yet
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowznl3p7v8eoyhvq5.xyzscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “xyz”
Lowznmx6p4s5vv7lus.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Lowzph9n-v1xt5-sxbglj.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowzplqw-h7z35-xrwhfa.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowzql1c-69xmm-upyshr.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowzr8n6-lfszk-ooueew.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowzsf18-x9qpf-onueaw.workscore 13· not probed yet
random-looking name “H=3.88”TLD with a high abuse rate “work”
Lowzsnxq-mch4z-balmvu.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowzt632-h5mrg-iwvpsx.workscore 13· not probed yet
random-looking name “H=4.00”TLD with a high abuse rate “work”
Lowzv54c-hdfse-ujzeyb.workscore 13· excluded
random-looking name “H=3.75”TLD with a high abuse rate “work”
Lowzvh1h-8bjzl-oifkin.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowzxbgp0ykrv12zjy.xyzscore 13· no DNS
random-looking name “H=3.64”TLD with a high abuse rate “xyz”
Lowzxp27-rmxsr-oqbqvl.workscore 13· not probed yet
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowzyhptkenut-lmp7evmi.cyouscore 13· no DNS
random-looking name “H=3.73”TLD with a high abuse rate “cyou”
Lowzyqt1-w9mr1-psolrs.workscore 13· excluded
random-looking name “H=3.62”TLD with a high abuse rate “work”
Lowzz52wyr40u-gby9cx61.cyouscore 13· no DNS
random-looking name “H=3.95”TLD with a high abuse rate “cyou”
Low1351465bd5e9a35695d2866ddb590098.clickscore 12· blocked the probe
very long name “32”TLD with a high abuse rate “click”
Low1to10eventsservices.comscore 12· robots.txt denied
lure words (login, verify, secure…) “service,services”
very long name “31”TLD with a high abuse rate “win”
lure words (login, verify, secure…) “service,services”
lure words (login, verify, secure…) “member,members”
lure words (login, verify, secure…) “service,services”
lure words (login, verify, secure…) “member,members”
lure words (login, verify, secure…) “auth”many hyphens “3”
very long name “29”TLD with a high abuse rate “cyou”
Lowaaanotaryservice.onlinescore 12· active website
lure words (login, verify, secure…) “service”form submits over plain HTTP “http://aaanotaryservice.online/”
Lowaakservices.comscore 12· boilerplate page
lure words (login, verify, secure…) “service,services”
Lowaandashippingandservicesinc.cloudscore 12· robots.txt denied
lure words (login, verify, secure…) “service,services”
Lowaarvixservices.shopscore 12· active website
lure words (login, verify, secure…) “service,services”
Lowabc-accounts.comscore 12· registrar placeholder
lure words (login, verify, secure…) “account,accounts”
Lowabccourierservices.onlinescore 12· robots.txt denied
lure words (login, verify, secure…) “service,services”
lure words (login, verify, secure…) “service,services”
lure words (login, verify, secure…) “claim,claims”
lure words (login, verify, secure…) “service,services”
Lowabs-polishing-services.comscore 12· empty page
lure words (login, verify, secure…) “service,services”
lure words (login, verify, secure…) “access,official”
lure words (login, verify, secure…) “service,services”
lure words (login, verify, secure…) “account,accounts”
Lowaccountstride.devscore 12· empty page
lure words (login, verify, secure…) “account,accounts”
Lowaccrualservices.infoscore 12· suspended
lure words (login, verify, secure…) “service,services”
Lowaceconstructionservices.bizscore 12· boilerplate page
lure words (login, verify, secure…) “service,services”
lure words (login, verify, secure…) “reward,rewards”
lure words (login, verify, secure…) “service,services”
Lowacrepairservicesfallbrook.infoscore 12· robots.txt denied
lure words (login, verify, secure…) “service,services”
Lowactchorservicesub.latscore 12· active website
lure words (login, verify, secure…) “service,services”
lure words (login, verify, secure…) “payment,payments”

Same data as JSON: /api/zone/risk?day=2026-10-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.