Flagged newborn domains, Thursday, September 3, 2026

12,129 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowsamdeal.storescore 14· active website
page pushes urgent paymentCLAIM YOUR REWARD
Lowsamuelwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowsanoofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…)officialTLD with a high abuse ratexyz
Lowsansbonusu.xyzscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse ratexyz
Lowsatswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowsavealert.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowsavetrackpro.xyzscore 14· not probed yet
lure words (login, verify, secure…)trackTLD with a high abuse ratexyz
Lowsavewallet.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowsavills.onescore 14· parked, for sale
login formhas_form+login words
Lowsayingwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
lure words (login, verify, secure…)servicefree DNS providerdnsowl.com
Lowsbtalertlabs.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowsbtverified.xyzscore 14· not probed yet
lure words (login, verify, secure…)verifiedTLD with a high abuse ratexyz
Lowsbtwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowscaleswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowscalewallet.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowscam-alert.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowscienceupdates.cyouscore 14· active website
lure words (login, verify, secure…)updateTLD with a high abuse ratecyou
Lowscorpmedia.inkscore 14· active website
login formhas_form+login words
Lowsealalert.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowsecure-a4202.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-app-load.onlinescore 14· no web server
lure words (login, verify, secure…)securefree DNS providerdnsowl.com
Lowsecure-b3311.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-c1687.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-c6804.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-e8493.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-f0629.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-f6800.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-g1871.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-h3679.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-h6700.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-i4734.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-j7648.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-j8931.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-k7278.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-l6372.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-l7778.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-l8292.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-m1617.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-m3257.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-m7513.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-m7850.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-n9776.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-o7622.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-u9656.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-w4671.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-x2255.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-x8550.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-z0713.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowsecure-z1296.xyzscore 14· server error
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz

Same data as JSON: /api/zone/risk?day=2026-09-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.