Flagged newborn domains, Monday, September 21, 2026

15,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowstakeportclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowstakeporttrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowstakingwallets.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowstandspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstartedpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstartedwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowstartspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstartupinvoice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowstartuppayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstarzbet-login.camscore 14· not probed yet
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cam”
Lowstatedpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstatespayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstatingpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstatingwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowstationpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstationswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowstatuepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstatusupdate.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowstayedpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstaysecurely.funscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “fun”
Lowstephenpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstephenwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowsteppaymentapp.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowsteppaymenthub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowsteppaymentpay.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstepportaldao.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowstepportallabs.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowstepportalpay.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowstickerpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstjeanlawclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowstjeanlawtrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowstockconfirmed.xyzscore 14· not probed yet
lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “xyz”
Lowstockconfirmer.xyzscore 14· not probed yet
lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “xyz”
Lowstockconfirms.xyzscore 14· not probed yet
lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “xyz”
Lowstockofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowstockofficials.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowstocksconfirm.xyzscore 14· not probed yet
lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “xyz”
Lowstocksconfirms.xyzscore 14· not probed yet
lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “xyz”
Lowstocksverified.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowstockswapclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowstockswaptrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowstockverified.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowstoppedpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstoresethereum.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “xyz”
Lowstoriespayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstrangepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstreaminvoices.xyzscore 14· not probed yet
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “xyz”
Lowstreetspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowstreetswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowstretchpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.