Flagged newborn domains, Wednesday, September 9, 2026

9,947 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowbtc-casinoer-bet-no77.funscore 14· active website
many hyphens “3”TLD with a high abuse rate “fun”
Lowbtc-casinoer-bet-no777.funscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “fun”
Lowbtc-casinoer-bet-no778.funscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “fun”
Lowbtc-kasyno-net-zone.funscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “fun”
Lowbusinessservicehub29.xyzscore 14· active website
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowbuzznest.funscore 14· active website
TLD with a high abuse rate “fun”form submits over plain HTTP “http://www.buzznest.fun/”
Lowcahayakoin.sitescore 14· active website
login form “has_form+login words”
Lowcahayakoin.spacescore 14· active website
login form “has_form+login words”
Lowcahayakoin.storescore 14· active website
login form “has_form+login words”
Lowcallsupportcenter.groupscore 14· active website
lure words (login, verify, secure…) “support”lure suffix “callsupportcenter”
Lowcalmresponse.shopscore 14· active website
page pushes urgent payment “risk-free”
Lowcameronpitts.photographyscore 14· active website
login form “has_form+login words”
Lowcandycasino-official-web.camscore 14· no DNS
lure words (login, verify, secure…) “official”TLD with a high abuse rate “cam”
Lowcanlimacizle-win.icuscore 14· boilerplate page
lure words (login, verify, secure…) “win”TLD with a high abuse rate “icu”
Lowcappertracker.winscore 14· active website
lure words (login, verify, secure…) “track”TLD with a high abuse rate “win”
Lowcardscope.cardsscore 14· active website
login form “has_form+login words”
Lowcartfillsavebig.infoscore 14· active website
page pushes urgent payment “Limited time offer”
Lowcasibom-bonusagiris.camscore 14· blocked the probe
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cam”
Lowcasino-plus-bonus.cfdscore 14· no DNS
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowcasino-zonder-cruks-nl.clickscore 14· not probed yet
many hyphens “3”TLD with a high abuse rate “click”
Lowcasinoas-eylulportali.icuscore 14· blocked the probe
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “icu”
Lowcasivera-official-web.icuscore 14· no DNS
lure words (login, verify, secure…) “official”TLD with a high abuse rate “icu”
Lowcbdaccess.xyzscore 14· not probed yet
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowcbdmember.xyzscore 14· not probed yet
lure words (login, verify, secure…) “member”TLD with a high abuse rate “xyz”
Lowcbtsmpii.sitescore 14· empty page
login form “has_form+login words”
Lowccleelimitedvaxc.xyzscore 14· no DNS
lure words (login, verify, secure…) “limited”TLD with a high abuse rate “xyz”
Lowcedefiaccess.xyzscore 14· not probed yet
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowcedefibonus.xyzscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “xyz”
Lowcedefireward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowcedefiunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowch-id.sbsscore 14· no DNS
lure words (login, verify, secure…) “id”TLD with a high abuse rate “sbs”
Lowchainsaccess.xyzscore 14· not probed yet
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowchainsbonus.xyzscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “xyz”
Lowchainsmember.xyzscore 14· not probed yet
lure words (login, verify, secure…) “member”TLD with a high abuse rate “xyz”
Lowchainsreward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowchainsunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowchainupdated.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowcheapestsecurity.xyzscore 14· active website
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowcheckout-date-invoice.cfdscore 14· blocked the probe
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “cfd”
Lowcheckout-invoice-date.cfdscore 14· blocked the probe
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “cfd”
Lowchicken-road-game-it-dg.lolscore 14· active website
many hyphens “4”TLD with a high abuse rate “lol”
Lowchicken-road-game-it-ej.lolscore 14· active website
many hyphens “4”TLD with a high abuse rate “lol”
Lowchicken-road-game-it-eo.lolscore 14· active website
many hyphens “4”TLD with a high abuse rate “lol”
Lowchicken-road-game-it-ko.lolscore 14· active website
many hyphens “4”TLD with a high abuse rate “lol”
Lowchicken-road-game-it-qh.lolscore 14· active website
many hyphens “4”TLD with a high abuse rate “lol”
Lowchicken-road-game-it-qv.lolscore 14· active website
many hyphens “4”TLD with a high abuse rate “lol”
Lowchicken-road-game-it-qw.lolscore 14· active website
many hyphens “4”TLD with a high abuse rate “lol”
Lowchicken-road-game-it-yk.lolscore 14· active website
many hyphens “4”TLD with a high abuse rate “lol”
Lowchicken-road-game-itae.lolscore 14· active website
many hyphens “3”TLD with a high abuse rate “lol”
Lowchicken-road-game-itao.lolscore 14· active website
many hyphens “3”TLD with a high abuse rate “lol”

Same data as JSON: /api/zone/risk?day=2026-09-09&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.