Flagged newborn domains, Monday, September 21, 2026

15,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowpaymentspecies.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentspeeds.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentspeedy.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentspirits.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentspoken.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsprompt.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentspublic.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsquare.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsquares.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsradar.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsreview.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsroute.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsrules.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssales.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssalon.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssauna.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsscorer.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssecond.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsselect.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssensor.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsserver.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssetup.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsshield.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssigner.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssilent.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssoccer.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssound.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsstable.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsstake.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsstakes.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssuper.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentssushi.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstages.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstands.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstarted.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstarts.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstartup.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstated.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstates.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstatic.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstating.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstatue.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstayed.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstealth.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstephen.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsticker.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstopped.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstored.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstrail.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentstudied.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.