Flagged newborn domains, Saturday, September 12, 2026

9,643 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowhelpdesklane.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdesklens.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdesklink.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdesklist.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskmemo.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskmode.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskpath.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskpipe.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskrank.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskroom.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskseal.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdesktool.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskview.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskwire.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpdeskyard.xyzscore 14· not probed yet
lure words (login, verify, secure…)helpdeskTLD with a high abuse ratexyz
Lowhelpsecure.helpscore 14· not probed yet
lure words (login, verify, secure…)securefree DNS providerdnsowl.com
Lowhelptrack.helpscore 14· not probed yet
lure words (login, verify, secure…)trackfree DNS providerdnsowl.com
Lowhelvexa-goldenbonus.clickscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse rateclick
Lowherabox.sitescore 14· active website
login formhas_form+login words
Lowhexon-api.shopscore 14· active website
login formhas_form+login words
Lowhfdxclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…)claimTLD with a high abuse ratexyz
Lowhicloudnexus.comscore 14echoes icloud
brand in the nameicloud
Lowhidden-rio-street-77.cfdscore 14· no DNS
many hyphens3TLD with a high abuse ratecfd
Lowhidden-waterfall-br-78.cfdscore 14· no DNS
many hyphens3TLD with a high abuse ratecfd
Lowhigh-quality-service.clickscore 14· no web server
lure words (login, verify, secure…)serviceTLD with a high abuse rateclick
Lowhigh-quality-service.workscore 14· no web server
lure words (login, verify, secure…)serviceTLD with a high abuse ratework
Lowhigh-quality-service.xyzscore 14· registrar placeholder
lure words (login, verify, secure…)serviceTLD with a high abuse ratexyz
Lowhighwaytires.onlinescore 14· active website
login formhas_form+login words
Lowhireshopifydeveloper.netscore 14echoes shopify
brand in the nameshopify
Lowhistoric-ouro-white-55.cfdscore 14· no DNS
many hyphens3TLD with a high abuse ratecfd
Lowhitibet-bonus-adres.icuscore 14· not probed yet
lure words (login, verify, secure…)bonusTLD with a high abuse rateicu
Lowhobbydeals.sitescore 14· active website
page pushes urgent paymentClaim Your Reward
Lowholiganbetguncelbonus.topscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratetop
Lowhummingbird.softwarescore 14· redirects elsewhere
login formhas_form+login words
Lowhypewikiportal.xyzscore 14· active website
lure words (login, verify, secure…)portalTLD with a high abuse ratexyz
Lowi-prosto-tak-ru.yachtsscore 14· active website
many hyphens3TLD with a high abuse rateyachts
Lowi-service.icuscore 14· active website
lure words (login, verify, secure…)serviceTLD with a high abuse rateicu
Lowicoaccess.xyzscore 14· not probed yet
lure words (login, verify, secure…)accessTLD with a high abuse ratexyz
Lowicomember.xyzscore 14· not probed yet
lure words (login, verify, secure…)memberTLD with a high abuse ratexyz
Lowid-n58382848.sbsscore 14· no web server
lure words (login, verify, secure…)idTLD with a high abuse ratesbs
Lowidbilling.xyzscore 14· not probed yet
lure words (login, verify, secure…)billingTLD with a high abuse ratexyz
Lowidocusigned.comscore 14echoes docusign
brand in the namedocusign
Lowidr108agen.clubscore 14· active website
login formhas_form+login words
Lowidr108naga.clubscore 14· active website
login formhas_form+login words
Lowigepsneust.comscore 14· active website
login formhas_form+login words
Lowimina.bandscore 14· active website
login formhas_form+login words
Lowindexbilling.xyzscore 14· not probed yet
lure words (login, verify, secure…)billingTLD with a high abuse ratexyz
Lowindexreward.xyzscore 14· not probed yet
lure words (login, verify, secure…)rewardTLD with a high abuse ratexyz
Lowindexunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…)unlockTLD with a high abuse ratexyz
Lowindiesmusic.infoscore 14· active website
login formhas_form+login words

Same data as JSON: /api/zone/risk?day=2026-09-12&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.