Flagged newborn domains, Thursday, September 3, 2026

12,129 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowfirstsecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowfitwalletxrp.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowfivesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowflayofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowflexboxandchill.comscore 14echoes xbox
brand in the name “xbox”
Lowflextracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowflowaidmedtech.careersscore 14· active website
login form “has_form+login words”
Lowfluentwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowfluidwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowflushtrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowfomoalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowfootballupdates.cyouscore 14· active website
lure words (login, verify, secure…) “update”TLD with a high abuse rate “cyou”
Lowforcedwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowforceswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowforgeairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowforgeportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowforgesecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowforgesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowformedwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowfortefitness.appscore 14· active website
login form “has_form+login words”
Lowfoughtwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowfpiairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowfpsinstitute.orgscore 14· blocked the probe
login form “has_form+login words”
Lowfrankiestiktokproducts.comscore 14echoes tiktok
brand in the name “tiktok”
Lowfraudnetsystems.comscore 14echoes etsy
brand in the name “etsy”
Lowfreealertdao.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowfreechatgptsites.comscore 14echoes chatgpt
brand in the name “chatgpt”
Lowfreeinvoice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowfreelywallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowfrogofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowfrontwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowftwtrack.xyzscore 14· empty page
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowfuelalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowfullalertdao.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowfun88login.funscore 14· not probed yet
lure words (login, verify, secure…) “login”TLD with a high abuse rate “fun”
Lowfundportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowgachawallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowgacorwinamps1.sitescore 14· active website
login form “has_form+login words”
Lowgamevaultmobiledfw.onlinescore 14echoes tmobile· empty page
brand in the name “tmobile”
Lowgarialert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowgatewallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowgazelleshoes.comscore 14echoes zelle
brand in the name “zelle”
Lowgazelletel.appscore 14echoes zelle· active website
brand in the name “zelle”
Lowgcf-assessment.onlinescore 14· active website
login form “has_form+login words”
Lowgcorwins1.sitescore 14· redirects elsewhere
login form “has_form+login words”
Lowgdenswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowgeekwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowgeniewallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowgenoalertdao.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowgerowallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.