Flagged newborn domains, Friday, September 4, 2026

12,463 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowyyrr.cloudscore 14· active website
login form “has_form+login words”
Lowzanhpsportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowzany-portal.questscore 14· boilerplate page
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “quest”
Lowzappreward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowzaz-bonus.icuscore 14· no web server
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “icu”
Lowzazbonus.icuscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “icu”
Lowzeevora.onlinescore 14· active website
page pushes urgent payment “LIMITED TIME OFFER”
Lowzelvaron-prizegold.clickscore 14· empty page
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “click”
Lowzenitracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowzero1bot.comscore 14· active website
login form “has_form+login words”
Lowzeropassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowzeus-denemebonusugn.cfdscore 14· empty page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusba-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusbm-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusbr-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeuscn-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeuscz-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusdenemebonusu-tek.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusdenemebonusuml.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusdenemexdbonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusdx-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusdz-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusfc-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusfg-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeushh-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusv-denemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzhundravise-official.sbsscore 14· active website
lure words (login, verify, secure…) “official”TLD with a high abuse rate “sbs”
Lowzitouna-bonus.cfdscore 14· no web server
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzkpaymentapp.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowzkpaymenthub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowzone-nye-norske-casinoer.funscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “fun”
Lowzonereward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowzoneswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowzorali.storescore 14· active website
page pushes urgent payment “Risk-Free”
Lowzrc-claim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowzro-claim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowzvezdnye-vrata-zv-1-cinema.homesscore 14· no web server
many hyphens “4”TLD with a high abuse rate “homes”
Lowzz-bonus.spacescore 14· robots.txt denied
lure words (login, verify, secure…) “bonus”free DNS provider “dnsowl.com”
Low004g1-6topf-pbyuvy.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low00c2v-5nupf-xpbtql.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low00ff6-t2ro8-livkpi.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low00rvlf5m8ew346t3-c721.cyouscore 13· no DNS
random-looking name “H=4.12”TLD with a high abuse rate “cyou”
Low01d34-7fux2-itbadd.cyouscore 13· no DNS
random-looking name “H=3.70”TLD with a high abuse rate “cyou”
Low01dzp3ygiuo7hbh.icuscore 13· no DNS
random-looking name “H=3.77”TLD with a high abuse rate “icu”
Low021kx-kwo4p-mhnqgz.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low027tn-f08c2-hbalzc.cyouscore 13· no DNS
random-looking name “H=3.62”TLD with a high abuse rate “cyou”
Low046dc-m9bz9-pyjztw.cyouscore 13· no DNS
random-looking name “H=3.75”TLD with a high abuse rate “cyou”
Low04qk9-hwca8-xunazl.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”
Low0601dhidkdm9sndydiengsp.xyzscore 13· parked, for sale
random-looking name “H=3.67”TLD with a high abuse rate “xyz”
Low0691g-cp8jt-llsnqz.cyouscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cyou”

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.