Flagged newborn domains, Thursday, September 3, 2026

12,129 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowairdropxrp.xyzscore 14· not probed yet
lure words (login, verify, secure…)airdropTLD with a high abuse ratexyz
Lowairdropzephyr.xyzscore 14· not probed yet
lure words (login, verify, secure…)airdropTLD with a high abuse ratexyz
Lowairdropzone.xyzscore 14· not probed yet
lure words (login, verify, secure…)airdropTLD with a high abuse ratexyz
Lowairportaldao.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowaitaxesguard.xyzscore 14· not probed yet
lure words (login, verify, secure…)taxesTLD with a high abuse ratexyz
Lowaitaxesstack.xyzscore 14· not probed yet
lure words (login, verify, secure…)taxesTLD with a high abuse ratexyz
Lowaitaxesvault.xyzscore 14· not probed yet
lure words (login, verify, secure…)taxesTLD with a high abuse ratexyz
Lowaitradingreview.appscore 14· active website
page pushes urgent paymentguaranteed returns
Lowaiverifysphere.sbsscore 14· active website
lure words (login, verify, secure…)verifyTLD with a high abuse ratesbs
Lowajtracker.xyzscore 14· not probed yet
lure words (login, verify, secure…)trackTLD with a high abuse ratexyz
Lowakulatrack.xyzscore 14· not probed yet
lure words (login, verify, secure…)trackTLD with a high abuse ratexyz
Lowal-updated-information.xyzscore 14· boilerplate page
lure words (login, verify, secure…)updateTLD with a high abuse ratexyz
Lowala-make-sase-lksds.beautyscore 14· boilerplate page
many hyphens3TLD with a high abuse ratebeauty
Lowalertabvivo.clickscore 14· active website
lure words (login, verify, secure…)alertTLD with a high abuse rateclick
Lowalertagents.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertbasic.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertbear.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertblob.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertblue.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertchart.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertcoach.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertdali.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalerteigen.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertflash.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertfolio.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertgacha.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertgrant.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertinter.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertjudo.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertkong.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertkoto.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertlambo.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertlane.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertmemo.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertmiso.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertmulti.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertmunch.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertnori.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertomall.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertover.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertpablo.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertpupil.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertquote.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertrelayer.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertroute.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertrust.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalerttofu.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalerttrie.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertturf.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowalertudon.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.