Flagged newborn domains, Thursday, August 27, 2026

17,538 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowcashier-merchant-billing.cfdscore 14· blocked the probe
lure words (login, verify, secure…)billingTLD with a high abuse ratecfd
Lowcashier-merchant-invoice.cfdscore 14· blocked the probe
lure words (login, verify, secure…)invoiceTLD with a high abuse ratecfd
Lowcashier-receive-billing.cfdscore 14· blocked the probe
lure words (login, verify, secure…)billingTLD with a high abuse ratecfd
Lowcashier-receive-invoice.cfdscore 14· blocked the probe
lure words (login, verify, secure…)invoiceTLD with a high abuse ratecfd
Lowcasibom-2026bonus.camscore 14· empty page
lure words (login, verify, secure…)bonusTLD with a high abuse ratecam
Lowcasibom-bonus2026.camscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse ratecam
Lowcasino-games-bonus.lolscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratelol
Lowcasino-igaming-login.lolscore 14· no DNS
lure words (login, verify, secure…)loginTLD with a high abuse ratelol
Lowcasino-play-for-cash.lolscore 14· no DNS
many hyphens3TLD with a high abuse ratelol
Lowcasino-play-for-money.lolscore 14· no DNS
many hyphens3TLD with a high abuse ratelol
Lowcasino-prise-bonus.lolscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratelol
Lowcasinobonus.topscore 14
lure words (login, verify, secure…)bonusTLD with a high abuse ratetop
Lowcasinobonus1.topscore 14
lure words (login, verify, secure…)bonusTLD with a high abuse ratetop
Lowcasinobonuslari.camscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratecam
lure words (login, verify, secure…)bonusTLD with a high abuse ratebuzz
Lowcasinobonusveren.camscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratecam
Lowcasinoelit-bonuslari.icuscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse rateicu
Lowcasinoportal.camscore 14· active website
lure words (login, verify, secure…)portalTLD with a high abuse ratecam
lure words (login, verify, secure…)bonusTLD with a high abuse ratetop
Lowcasipol-bonuslari1.icuscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse rateicu
Lowcasipol-bonuslari1x.icuscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse rateicu
lure words (login, verify, secure…)bonusTLD with a high abuse ratecam
Lowcastoto-win.lolscore 14· no DNS
lure words (login, verify, secure…)winTLD with a high abuse ratelol
Lowcbtxhome.shopscore 14· active website
login formhas_form+login words
Lowcdn2vid8.livescore 14· redirects elsewhere
login formhas_form+login words
lure words (login, verify, secure…)loginTLD with a high abuse ratecfd
Lowcentllbradatc.onlinescore 14· active website
login formhas_form+login words
lure words (login, verify, secure…)serviceTLD with a high abuse ratexyz
Lowcentricapp.orgscore 14· active website
login formhas_form+login words
Lowcentroportal.topscore 14
lure words (login, verify, secure…)portalTLD with a high abuse ratetop
Lowceritautara.comscore 14echoes itau
brand in the nameitau
Lowcevrimsizbonus.camscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecam
Lowchakradhari-sultra.sitescore 14· parked, for sale
login formhas_form+login words
many hyphens3TLD with a high abuse ratetop
Lowcheck-and-unlock.cfdscore 14· blocked the probe
lure words (login, verify, secure…)unlockTLD with a high abuse ratecfd
Lowchesapeakebaycottages.comscore 14echoes ebay
brand in the nameebay
Lowchilonetsystems.comscore 14echoes etsy
brand in the nameetsy
Lowchromeliteupdates.topscore 14· no web server
lure words (login, verify, secure…)updateTLD with a high abuse ratetop
Lowchucked.appscore 14· active website
login formhas_form+login words
Lowcicak-win.winscore 14· active website
lure words (login, verify, secure…)winTLD with a high abuse ratewin
lure words (login, verify, secure…)claimTLD with a high abuse ratexyz
lure words (login, verify, secure…)claimTLD with a high abuse ratexyz
lure words (login, verify, secure…)claimTLD with a high abuse ratexyz
lure words (login, verify, secure…)claimTLD with a high abuse ratexyz
Lowclaim-robin.topscore 14· blocked the probe
lure words (login, verify, secure…)claimTLD with a high abuse ratetop
Lowclaimday.lolscore 14· active website
lure words (login, verify, secure…)claimTLD with a high abuse ratelol
Lowclaimheaven.lolscore 14
lure words (login, verify, secure…)claimTLD with a high abuse ratelol
Lowclaimmars.lolscore 14
lure words (login, verify, secure…)claimTLD with a high abuse ratelol
Lowclaimplanet.lolscore 14
lure words (login, verify, secure…)claimTLD with a high abuse ratelol
Lowclaimto.topscore 14· active website
lure words (login, verify, secure…)claimTLD with a high abuse ratetop

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.