Flagged newborn domains, Monday, September 21, 2026

15,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

brand in page title, not in the name “cloudflare”
Lowmahadevrepair.onlinescore 20· active website
brand in page title, not in the name “whatsapp”
Lowmahadevrepair.shopscore 20· active website
brand in page title, not in the name “whatsapp”
Lowmahadevrepair.sitescore 20· active website
brand in page title, not in the name “whatsapp”
Lowmahamaal.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmahstore.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmainio.softwarescore 20· active website
brand in page title, not in the name “whatsapp”
Lowmaisonbloomconciergerie.comscore 20· active website
brand in page title, not in the name “airbnb”
Lowmajubersamakks.shopscore 20· active website
brand in page title, not in the name “namecheap”
Lowmakerpayments.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowmakeuppayments.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowmakkahtrader.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmamrov.spacescore 20· empty page
brand in page title, not in the name “telegram”
Lowmanagepayments.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowmandela.infoscore 20· active website
brand in page title, not in the name “roblox”
Lowmandio.appscore 20· active website
brand in page title, not in the name “microsoft”
Lowmandio.cloudscore 20· redirects elsewhere
brand in page title, not in the name “microsoft”
Lowmangaalertswap.xyzscore 20· not probed yet
lure words (login, verify, secure…) “alert,alerts”TLD with a high abuse rate “xyz”
Lowmangoz.onlinescore 20· active website
brand in page title, not in the name “godaddy”
Lowmannatphone.shopscore 20· active website
brand in page title, not in the name “whatsapp”
Lowmaplives.sitescore 20· empty page
brand in page title, not in the name “google”
Lowmarathiaimasterclass.onlinescore 20· active website
brand in page title, not in the name “chatgpt”
Lowmarcfitnessco.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmarcher.devscore 20· redirects elsewhere
brand in page title, not in the name “cloudflare”
Lowmarginpayments.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowmariaguadalupevelasco.infoscore 20· active website
brand in page title, not in the name “tiktok”
Lowmariamu.comscore 20· redirects elsewhere
brand in page title, not in the name “adobe”
Lowmariasbeautyshop.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmarisfinds.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmaritimepsychology.orgscore 20· active website
brand in page title, not in the name “wordpress”
Lowmarketaccounts.xyzscore 20· not probed yet
lure words (login, verify, secure…) “account,accounts”TLD with a high abuse rate “xyz”
Lowmarketlypk.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmarketmembers.xyzscore 20· not probed yet
lure words (login, verify, secure…) “member,members”TLD with a high abuse rate “xyz”
Lowmarketrecovery.xyzscore 20· not probed yet
lure words (login, verify, secure…) “recover,recovery”TLD with a high abuse rate “xyz”
Lowmaroplace.shopscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowmarqa.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmarshlandmercantile.comscore 20· blocked the probe
brand in page title, not in the name “etsy”
Lowmart.devscore 20· active website
brand in page title, not in the name “linkedin”
Lowmarwatmart.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmarywilbanks.comscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowmassolutions.devscore 20· active website
brand in page title, not in the name “google”
Lowmastorepk.shopscore 20· other
brand in page title, not in the name “cloudflare”
Lowmatrixpayments.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowmatvi.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmaverayazilim.techscore 20· active website
brand in page title, not in the name “whatsapp”
Lowmchoice.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmcnunuuo.shopscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowmdigitalinvest.comscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowmeaningfulprogress.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowmedicalnexus.orgscore 20· active website
brand in page title, not in the name “namecheap”

Same data as JSON: /api/zone/risk?day=2026-09-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.