Flagged newborn domains, Wednesday, September 16, 2026

15,119 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowsecurekycagent.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurelabagent.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurelabsdocs.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurelawagent.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecureoffchain.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecureora57.bondscore 14· no DNS
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “bond”
Lowsecurescedefi.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuresonchain.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurestash.xyzscore 14· suspended
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretaxagent.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretrustai.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurity-boton.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityaibot.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityaidesk.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityaiflow.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityailab.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecuritybot-on.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecuritygpu.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecuritylane.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecuritymode.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityms.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecuritypipe.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityporn.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityriskai.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityscorer.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecuritytime.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowsecurityyard.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowseekingpleasers.artscore 14· blocked the probe
login form “has_form+login words”
Lowseiyuualert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowseiyuuclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowseiyuutrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowsekabet-bonus21.icuscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “icu”
Lowsekabt-bonuspartner.icuscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “icu”
Lowsekaliclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowsekalitrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowseks-v-bolshom-gorode-hd.cyouscore 14· active website
many hyphens “4”TLD with a high abuse rate “cyou”
Lowseks-v-bolshom-gorode-hit.momscore 14· active website
many hyphens “4”TLD with a high abuse rate “mom”
Lowseks-v-bolshom-gorode-kino.hairscore 14· boilerplate page
many hyphens “4”TLD with a high abuse rate “hair”
Lowselectclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowselleralert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowsellersalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowsempli.orgscore 14· active website
login form “has_form+login words”
Lowsensorclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowsentimentwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowserverclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowserverswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowservice-bestvpn.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowservice-er-02.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowservice-erhalten879.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowserviceai.streamscore 14· no DNS
lure words (login, verify, secure…) “service”TLD with a high abuse rate “stream”

Same data as JSON: /api/zone/risk?day=2026-09-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.