Flagged newborn domains, Wednesday, September 16, 2026

15,119 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lownimbleclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowninputclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowninputtrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lownironstudio.orgscore 14· active website
page pushes urgent payment “Risk Free”
Lownoahsresourcecenter.orgscore 14· active website
login form “has_form+login words”
Lownobu99login.xyzscore 14· no web server
lure words (login, verify, secure…) “login”TLD with a high abuse rate “xyz”
Lownocodealerting.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lownocodesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lownoctusclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lownoctustrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lownogasunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lownonpaymentdao.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lownormcasino-bonus.buzzscore 14· active website
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “buzz”
Lownorth-play-casinos-ca.clickscore 14· redirects elsewhere
many hyphens “3”TLD with a high abuse rate “click”
Lownorthboundintuitive.comscore 14echoes intuit
brand in the name “intuit”
Lownorthlinemechanical.netscore 14echoes lineme
brand in the name “lineme”
Lownorthportalgaragedoor.homesscore 14· active website
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “homes”
Lownotblocked.xyzscore 14· active website
lure words (login, verify, secure…) “locked”TLD with a high abuse rate “xyz”
Lownotionswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lownovatracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lownovelx.onlinescore 14· active website
login form “has_form+login words”
Lownpsalerting.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lownpssecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lownursesalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowoaenink.storescore 14· active website
page pushes urgent payment “Limited time offer”
Lowobservealert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowocaccess.xyzscore 14· active website
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowochen-strannie-dela-max.cfdscore 14· active website
many hyphens “3”TLD with a high abuse rate “cfd”
Lowochen-strannie-dela-plus.skinscore 14· active website
many hyphens “3”TLD with a high abuse rate “skin”
Lowochen-strannie-dela-ru.autosscore 14· active website
many hyphens “3”TLD with a high abuse rate “autos”
Lowochen-strannye-dela-on.sbsscore 14· active website
many hyphens “3”TLD with a high abuse rate “sbs”
Lowochen-strannye-dela-rf.buzzscore 14· active website
many hyphens “3”TLD with a high abuse rate “buzz”
Lowochen-strannye-dela-up.cfdscore 14· active website
many hyphens “3”TLD with a high abuse rate “cfd”
Lowodni-iz-nas-lord.hairscore 14· active website
many hyphens “3”TLD with a high abuse rate “hair”
Lowodni-iz-nas-plus.lolscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “lol”
Lowodni-iz-nas-ru.skinscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “skin”
Lowoewajan.infoscore 14· active website
login form “has_form+login words”
Lowoffchainalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowoffchainsecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowoffersearchdaily.infoscore 14· active website
page pushes urgent payment “Limited Time Offer”
Lowofficial8.xyzscore 14· no DNS
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowofficialbuying.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowofficialcedefi.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowofficialgiris.icuscore 14· no DNS
lure words (login, verify, secure…) “official”TLD with a high abuse rate “icu”
Lowofficialket.xyzscore 14· empty page
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowofficiallydao.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowofficiallydefi.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowofficiallyeth.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowofficialplus.clickscore 14· no web server
lure words (login, verify, secure…) “official”TLD with a high abuse rate “click”
Lowofficialscore.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.