Flagged newborn domains, Saturday, September 19, 2026

10,568 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowwinnerdataset.xyzscore 14· not probed yet
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “xyz”
Lowwishcart.appscore 14· active website
login form “has_form+login words”
Lowworkaccessed.xyzscore 14· not probed yet
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowworkcustomer.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowworkerinvoice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowworkflowalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowworkgiveaway.xyzscore 14· not probed yet
lure words (login, verify, secure…) “giveaway”TLD with a high abuse rate “xyz”
Lowworkingbonus.xyzscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “xyz”
Lowworkpackages.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowworkpassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowworkremember.xyzscore 14· not probed yet
lure words (login, verify, secure…) “member”TLD with a high abuse rate “xyz”
Lowworkrewarded.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowworkunlocker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowworldalertapp.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowworldalerthub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowwow33-portal.topscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “top”
Lowwqjzzhku-gov.cfdscore 14· not probed yet
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “cfd”
Lowww1-maverick.comscore 14· active website
login form “has_form+login words”
Lowx-betwinner4392.topscore 14· no web server
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “top”
Lowx-wallet.funscore 14· placeholder page
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “fun”
Lowxrpcodewallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowyashworld.spacescore 14· active website
login form “has_form+login words”
Lowyicloudapi.comscore 14echoes icloud
brand in the name “icloud”
Lowyilmazsenanofficial.xyzscore 14· registrar placeholder
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowyoupaymentapp.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowyoupaymenthub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowypecloud.appscore 14· active website
login form “has_form+login words”
Lowzaferbetclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowzaferbettrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowzamuzh-po-raschyotu-kinozal.homesscore 14· no web server
many hyphens “3”TLD with a high abuse rate “homes”
Lowzaxbet-bet.spacescore 14· active website
page pushes urgent payment “Claim Your Bonus”
Lowzengea-portal.topscore 14· robots.txt denied
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “top”
Lowzeroportalapp.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowzeroportalhub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowzerowalletapp.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowzerowallethub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowzeus-denemebonususiteleriw.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeus-denemehwbonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeus-denemejhbonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeus-denemeywbonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeus-wwwdenemebonusu.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusdenemebonusu-dnmm.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzeusdenemebonusvnsiteleri.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzhuluclub.comscore 14echoes hulu
brand in the name “hulu”
Lowzitouna-bonuses.sbsscore 14· no web server
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “sbs”
Lowzixzixy3443.onlinescore 14· empty page
login form “has_form+login words”
Lowzkverifyninja.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verify”TLD with a high abuse rate “xyz”
Lowzoningportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowzsdnemebonusuzsx.cfdscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”
Lowzuekkosslipix.orgscore 14· active website
page pushes urgent payment “Risk-Free”

Same data as JSON: /api/zone/risk?day=2026-09-19&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.