Flagged newborn domains, Sunday, September 6, 2026

11,067 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowpaymentretail.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentretain.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentrope.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttailor.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttaiwan.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttaxapp.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttaxdesk.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttaxhub.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttaxlabs.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentterrain.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttexas.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttexts.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttraders.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttrades.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttrained.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttrainer.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttrains.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttraits.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttravels.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttrusted.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymenttrustme.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentunblock.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentunclear.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentvaults.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentwaiting.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentwealth.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentwealthy.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpaymentyields.xyzscore 14· not probed yet
lure words (login, verify, secure…)paymentTLD with a high abuse ratexyz
Lowpayofficially.xyzscore 14· not probed yet
lure words (login, verify, secure…)officialTLD with a high abuse ratexyz
Lowpayoutalerting.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowpayoutinvoice.xyzscore 14· not probed yet
lure words (login, verify, secure…)invoiceTLD with a high abuse ratexyz
Lowpayoutsverify.xyzscore 14· not probed yet
lure words (login, verify, secure…)verifyTLD with a high abuse ratexyz
Lowpayrollinvoice.xyzscore 14· not probed yet
lure words (login, verify, secure…)invoiceTLD with a high abuse ratexyz
Lowpayrollverify.xyzscore 14· not probed yet
lure words (login, verify, secure…)verifyTLD with a high abuse ratexyz
Lowpaysafetrack.clickscore 14· no web server
lure words (login, verify, secure…)trackTLD with a high abuse rateclick
Lowpayservice.xyzscore 14· not probed yet
lure words (login, verify, secure…)serviceTLD with a high abuse ratexyz
Lowpayverifyninja.xyzscore 14· not probed yet
lure words (login, verify, secure…)verifyTLD with a high abuse ratexyz
Lowpaywalletscore.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowpaywalletshift.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowpaywalletsign.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowpbdev.appscore 14· blocked the probe
login formhas_form+login words
Lowpegwalletscore.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz
Lowpelangi75.orgscore 14· active website
login formhas_form+login words
Lowpennysecures.xyzscore 14· not probed yet
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowpentaslot.shopscore 14· active website
login formhas_form+login words
Lowpeoplealert.xyzscore 14· not probed yet
lure words (login, verify, secure…)alertTLD with a high abuse ratexyz
Lowpeopleverify.xyzscore 14· not probed yet
lure words (login, verify, secure…)verifyTLD with a high abuse ratexyz
Lowpermitsecure.xyzscore 14· not probed yet
lure words (login, verify, secure…)secureTLD with a high abuse ratexyz
Lowperpclaiming.xyzscore 14· not probed yet
lure words (login, verify, secure…)claimTLD with a high abuse ratexyz
Lowperphardwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…)walletTLD with a high abuse ratexyz

Same data as JSON: /api/zone/risk?day=2026-09-06&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.