Flagged newborn domains, Thursday, August 27, 2026

17,538 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

lure words (login, verify, secure…)portalTLD with a high abuse ratetop
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalmagnoliafield.clickscore 14· active website
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalmasukrejeki.funscore 14· no DNS
lure words (login, verify, secure…)portalTLD with a high abuse ratefun
Lowportalmayora4d.xyzscore 14· no DNS
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
lure words (login, verify, secure…)portalTLD with a high abuse ratesbs
Lowportalqnbinvest.xyzscore 14· registrar placeholder
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalredwoodcore.clickscore 14· active website
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalredwoodfield.clickscore 14· active website
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalredwoodhub.clickscore 14· active website
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalredwoodpath.clickscore 14· active website
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalredwoodway.clickscore 14· active website
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalresgatlivelbra.clickscore 14· no DNS
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalsk.funscore 14· placeholder page
lure words (login, verify, secure…)portalTLD with a high abuse ratefun
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportaluob168.xyzscore 14· no DNS
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalwd-royal138.makeupscore 14· placeholder page
lure words (login, verify, secure…)portalTLD with a high abuse ratemakeup
lure words (login, verify, secure…)portalTLD with a high abuse ratetop
lure words (login, verify, secure…)portalTLD with a high abuse ratetop
Lowportalxc.funscore 14· placeholder page
lure words (login, verify, secure…)portalTLD with a high abuse ratefun
lure words (login, verify, secure…)verificationTLD with a high abuse rateclick
lure words (login, verify, secure…)deliveryTLD with a high abuse rateclick
lure words (login, verify, secure…)deliveryTLD with a high abuse rateclick
Lowpowersgetsyouhome.comscore 14echoes etsy
brand in the nameetsy
Lowprecedencecore.devscore 14· active website
login formhas_form+login words
Lowpremdharamambulanceservice.buzzscore 14· active website
lure words (login, verify, secure…)serviceTLD with a high abuse ratebuzz
lure words (login, verify, secure…)accountTLD with a high abuse ratetop
Lowprimenets.proscore 14· active website
login formhas_form+login words
lure words (login, verify, secure…)accessTLD with a high abuse ratexyz
lure words (login, verify, secure…)prizeTLD with a high abuse rateautos
many hyphens3TLD with a high abuse rateclick
Lowpro-real-cash-casinos2.funscore 14· active website
many hyphens3TLD with a high abuse ratefun
Lowprolinemed.comscore 14echoes lineme
brand in the namelineme
lure words (login, verify, secure…)secureTLD with a high abuse rateclick
Lowpumptrack-lebring.xyzscore 14· no DNS
lure words (login, verify, secure…)trackTLD with a high abuse ratexyz
Lowpusototo.netscore 14· active website
login formhas_form+login words
Lowpyat-minut-tishiny-hd.hairscore 14· no web server
many hyphens3TLD with a high abuse ratehair
Lowqastaff-check-sorting-1.buzzscore 14· active website
many hyphens3TLD with a high abuse ratebuzz
Lowqastaff-check-sorting-2.momscore 14· not probed yet
many hyphens3TLD with a high abuse ratemom
Lowquangcaogoogleadwords.comscore 14echoes google
brand in the namegoogle
Lowquickcoolcup.storescore 14· active website
page pushes urgent paymentLimited Time Offer
Lowquos-aut-id.topscore 14
lure words (login, verify, secure…)idTLD with a high abuse ratetop
lure words (login, verify, secure…)officialTLD with a high abuse ratetop
Lowradiantmobiles.comscore 14echoes tmobile
brand in the nametmobile
Lowragavan.ltdscore 14· active website
login formhas_form+login words

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.