Flagged newborn domains, Thursday, September 3, 2026

12,129 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowaudiowallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowaura-pie.orgscore 14· active website
login form “has_form+login words”
Lowaurasure.shopscore 14· active website
page pushes urgent payment “Limited Time Offer”
Lowaurevix-prizerocket.clickscore 14· empty page
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “click”
Lowaurexo-portal.xyzscore 14· empty page
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowaurum-oro.appscore 14· active website
login form “has_form+login words”
Lowauth-verif.topscore 14· blocked the probe
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “top”
Lowautoalertdao.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowautobiztz.comscore 14· active website
login form “has_form+login words”
Lowavriowallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowax-thub.sitescore 14· active website
login form “has_form+login words”
Lowaxessbetbonusu.xyzscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “xyz”
Lowaye4dresmi01.onlinescore 14· active website
login form “has_form+login words”
Lowazino777casinoofficial.buzzscore 14· blocked the probe
lure words (login, verify, secure…) “official”TLD with a high abuse rate “buzz”
Lowb-mei-bao-product.clickscore 14· robots.txt denied
many hyphens “3”TLD with a high abuse rate “click”
Lowbabutrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowbackontrackmanchester.workscore 14· placeholder page
lure words (login, verify, secure…) “track”TLD with a high abuse rate “work”
Lowbacktracks.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowbadgealert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowbadgeconfirm.xyzscore 14· not probed yet
lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “xyz”
Lowbakewallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowbalancewallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowbalapliar.sitescore 14· blocked the probe
login form “has_form+login words”
Lowbankerwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowbasketwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowbattlewallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowbbngrandprize.clickscore 14· server error
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “click”
Lowbcheebilling.xyzscore 14· not probed yet
lure words (login, verify, secure…) “billing”TLD with a high abuse rate “xyz”
Lowbclportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowbdvc.spacescore 14· active website
login form “has_form+login words”
Lowbeaconsecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowbeacontrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowbeacontrackr.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowbeaconverify.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verify”TLD with a high abuse rate “xyz”
Lowbeaconwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowbearalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowbefluxus-b-redeltaa-defluxi.topscore 14· robots.txt denied
many hyphens “3”TLD with a high abuse rate “top”
Lowbenchalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowbeon-bet-danmark-play.funscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “fun”
Lowbest-casinos-spin-nz.funscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “fun”
Lowbestbonus.autosscore 14· redirects elsewhere
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “autos”
Lowbestbonus.cfdscore 14· redirects elsewhere
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowbestbonus.cyouscore 14· redirects elsewhere
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cyou”
Lowbestbonus.lolscore 14· redirects elsewhere
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “lol”
Lowbestbonus.sbsscore 14· redirects elsewhere
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “sbs”
Lowbestdailydealsshop.infoscore 14· active website
page pushes urgent payment “Limited Time Offer”
Lowbeste-casino-zonder-idin.clickscore 14· no DNS
many hyphens “3”TLD with a high abuse rate “click”
Lowbetebet-bonusgiris.icuscore 14· no DNS
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “icu”
Lowbetnanoofficialgir.icuscore 14· placeholder page
lure words (login, verify, secure…) “official”TLD with a high abuse rate “icu”
Lowbetsydo.comscore 14echoes etsy
brand in the name “etsy”

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.