Flagged newborn domains, Thursday, August 27, 2026

17,538 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowcashier-merchant-billing.cfdscore 14· blocked the probe
lure words (login, verify, secure…) “billing”TLD with a high abuse rate “cfd”
Lowcashier-merchant-invoice.cfdscore 14· blocked the probe
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “cfd”
Lowcashier-receive-billing.cfdscore 14· blocked the probe
lure words (login, verify, secure…) “billing”TLD with a high abuse rate “cfd”
Lowcashier-receive-invoice.cfdscore 14· blocked the probe
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “cfd”
Lowcasibom-2026bonus.camscore 14· empty page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cam”
Lowcasibom-bonus2026.camscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cam”
Lowcasino-games-bonus.lolscore 14· no DNS
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “lol”
Lowcasino-igaming-login.lolscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “lol”
Lowcasino-play-for-cash.lolscore 14· no DNS
many hyphens “3”TLD with a high abuse rate “lol”
Lowcasino-play-for-money.lolscore 14· no DNS
many hyphens “3”TLD with a high abuse rate “lol”
Lowcasino-prise-bonus.lolscore 14· no DNS
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “lol”
Lowcasinobonus.topscore 14
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “top”
Lowcasinobonus1.topscore 14
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “top”
Lowcasinobonuslari.camscore 14· no DNS
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cam”
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “buzz”
Lowcasinobonusveren.camscore 14· no DNS
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cam”
Lowcasinoelit-bonuslari.icuscore 14· active website
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “icu”
Lowcasinoportal.camscore 14· active website
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “cam”
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “top”
Lowcasipol-bonuslari1.icuscore 14· active website
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “icu”
Lowcasipol-bonuslari1x.icuscore 14· active website
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “icu”
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cam”
Lowcastoto-win.lolscore 14· no DNS
lure words (login, verify, secure…) “win”TLD with a high abuse rate “lol”
Lowcbtxhome.shopscore 14· active website
login form “has_form+login words”
Lowcdn2vid8.livescore 14· redirects elsewhere
login form “has_form+login words”
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cfd”
Lowcentllbradatc.onlinescore 14· active website
login form “has_form+login words”
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowcentricapp.orgscore 14· active website
login form “has_form+login words”
Lowcentroportal.topscore 14
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “top”
Lowceritautara.comscore 14echoes itau
brand in the name “itau”
Lowcevrimsizbonus.camscore 14· active website
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cam”
Lowchakradhari-sultra.sitescore 14· parked, for sale
login form “has_form+login words”
many hyphens “3”TLD with a high abuse rate “top”
Lowcheck-and-unlock.cfdscore 14· blocked the probe
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “cfd”
Lowchesapeakebaycottages.comscore 14echoes ebay
brand in the name “ebay”
Lowchilonetsystems.comscore 14echoes etsy
brand in the name “etsy”
Lowchromeliteupdates.topscore 14· no web server
lure words (login, verify, secure…) “update”TLD with a high abuse rate “top”
Lowchucked.appscore 14· active website
login form “has_form+login words”
Lowcicak-win.winscore 14· active website
lure words (login, verify, secure…) “win”TLD with a high abuse rate “win”
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowclaim-robin.topscore 14· blocked the probe
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “top”
Lowclaimday.lolscore 14· active website
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “lol”
Lowclaimheaven.lolscore 14
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “lol”
Lowclaimmars.lolscore 14
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “lol”
Lowclaimplanet.lolscore 14
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “lol”
Lowclaimto.topscore 14· active website
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “top”

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.