Flagged newborn domains, Friday, September 4, 2026

12,463 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowphoneupdate.xyzscore 14· not probed yet
lure words (login, verify, secure…)updateTLD with a high abuse ratexyz
Lowphoton-airdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…)airdropTLD with a high abuse ratexyz
Lowpiabetbonusu.xyzscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse ratexyz
Lowpiarsofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…)officialTLD with a high abuse ratexyz
Lowpinreward.xyzscore 14· not probed yet
lure words (login, verify, secure…)rewardTLD with a high abuse ratexyz
Lowpiwallet.devscore 14· no DNS
lure words (login, verify, secure…)walletfree DNS providerdnsowl.com
Lowpixels-claim.xyzscore 14· not probed yet
lure words (login, verify, secure…)claimTLD with a high abuse ratexyz
Lowpixelskylinemedia.comscore 14echoes lineme
brand in the namelineme
Lowplataformaamazonica.orgscore 14echoes amazon· robots.txt denied
brand in the nameamazon
Lowplay-bonuscash.xyzscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse ratexyz
Lowplay-bonusgold.xyzscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse ratexyz
Lowplay-bonushub.xyzscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse ratexyz
Lowplay-bonuswin.xyzscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse ratexyz
Lowplayzone-win.xyzscore 14· not probed yet
lure words (login, verify, secure…)winTLD with a high abuse ratexyz
Lowpmpdelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…)deliveryTLD with a high abuse ratexyz
Lowpo-volchim-zakonam-kinozal.buzzscore 14· no web server
many hyphens3TLD with a high abuse ratebuzz
Lowpolo188gas.onlinescore 14· active website
login formhas_form+login words
Lowportal-go.buzzscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratebuzz
Lowportal-go.cfdscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratecfd
Lowportal-go.cyouscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratecyou
Lowportal-go.sbsscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratesbs
Lowportal-link.buzzscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratebuzz
Lowportal-link.cfdscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratecfd
Lowportal-link.cyouscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratecyou
Lowportal-link.sbsscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratesbs
Lowportal-seduc.xyzscore 14· no DNS
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportal2.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalbirds.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalblocks.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalcoiin.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalcoln.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportaldados.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportaldasfinancas.sbsscore 14· empty page
lure words (login, verify, secure…)portalTLD with a high abuse ratesbs
Lowportaldosol4k.topscore 14· empty page
lure words (login, verify, secure…)portalTLD with a high abuse ratetop
Lowportaldrops.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalemfoco.clickscore 14· empty page
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalexchange.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalharry.clickscore 14· blocked the probe
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalilusi.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalintim.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalmaster.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalmediaexpress.cfdscore 14· placeholder page
lure words (login, verify, secure…)portalTLD with a high abuse ratecfd
Lowportalnouns.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalrcf.clickscore 14· empty page
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalrv.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportals-coin.xyzscore 14· not probed yet
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowportalseqesocl.cfdscore 14· empty page
lure words (login, verify, secure…)portalTLD with a high abuse ratecfd
Lowportalshoppoint.cfdscore 14· placeholder page
lure words (login, verify, secure…)portalTLD with a high abuse ratecfd
Lowportaltonarnia.clickscore 14· blocked the probe
lure words (login, verify, secure…)portalTLD with a high abuse rateclick
Lowportalverificabrasil.xyzscore 14· no DNS
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.