Flagged newborn domains, Monday, September 21, 2026

15,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowverifiedbrief.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedbudget.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedbuyer.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcalls.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcampus.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcases.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedchart.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcharts.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcheck.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedchurch.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedchurn.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcipher.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedclass.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedclause.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedclerk.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedclose.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcoding.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcohort.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcollab.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcookie.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcosts.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcourse.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedcpulab.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddeals.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddelta.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddemand.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddemos.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddental.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddevops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddirect.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddocket.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddocks.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddoctor.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifieddriver.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedevents.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedfarms.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedfield.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedfiling.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedfinal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedfinder.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedflash.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedfolio.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedforms.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedframe.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedgpulab.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedgrade.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedgrowth.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedguide.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedhazard.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowverifiedhipaa.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.