Flagged newborn domains, Saturday, September 19, 2026

10,568 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowinvoicefabric.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicefolder.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicegarden.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicehazard.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicekeeper.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicekernel.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicelesson.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoiceliquid.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicelookup.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicemargin.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicematter.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicemetric.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicemirror.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicemodule.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoiceparser.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicepickup.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicerecord.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicerental.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicereview.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicerunner.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesafety.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesaiops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesample.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicescheck.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicescraft.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicescreen.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesearch.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoiceserver.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesflows.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesigner.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoiceslinks.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesolver.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicespilot.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicespulse.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesradar.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesscale.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesurvey.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoiceswatch.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoiceswitch.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicesystem.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicetenant.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicevector.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicewindow.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoiceworker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowinvoicezoning.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowip-api.cloudscore 14· active website
login form “has_form+login words”
Lowisslandiq.xyzscore 14· active website
TLD with a high abuse rate “xyz”form submits over plain HTTP “https://isslandiq.xyz/”
Lowissuerinvoice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowisublockserve.onlinescore 14· active website
login form “has_form+login words”
Lowitsunclaimed.xyzscore 14· no web server
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-19&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.