Flagged newborn domains, Monday, September 21, 2026

15,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowreachedwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreachespayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreacheswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreachingwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreactorpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreaderspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreadilypayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreadilywallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreadingpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowrealitypayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowrealizedwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreallypayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreasonspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreasonswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowrecalledwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreceiptinvoice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowreceivedwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreceivepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreceiverwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreceiveswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowrechnungsportal.clickscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “click”
Lowrecipeofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowreclaimingourrhyme.xyzscore 14· boilerplate page
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowreclaimingtherhymes.xyzscore 14· boilerplate page
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowreconcilealert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowreconcileclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowrecordedwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowrecordspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowrecoveragentic.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecoveredblock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecoveredbrain.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecoveredchain.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecoveredcoin.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecovereddefi.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecoveredlayer.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecoveredtoken.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecoveronchain.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowrecruitinvoice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowrecruitpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowrecyclepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowredactrevolution.comscore 14echoes revolut
brand in the name “revolut”
Lowredbluepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowredespump.techscore 14· active website
login form “has_form+login words”
Lowreducedpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreducedwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreducespayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowreduceswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreducingwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreferredwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowreferspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.