Flagged newborn domains, Monday, September 21, 2026

15,107 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowpaymentstudies.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsturbo.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsubject.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsubset.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsudden.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsudoku.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsuffer.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsuffix.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsuggest.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsuited.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsuites.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsunday.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsunrise.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsunset.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsupers.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsupreme.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsurface.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsurgery.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsurvey.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsurvive.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsvalid.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentswagmi.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentswatch.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsweden.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentswedish.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentswindow.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsworker.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentsyogun.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpaymentupdated.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,update”TLD with a high abuse rate “xyz”
Lowpaymydue.comscore 20· active website
brand in page title, not in the name “whatsapp”
Lowpeakvistatv.infoscore 20· active website
brand in page title, not in the name “whatsapp”
Lowpeekscope.orgscore 20· active website
brand in page title, not in the name “wordpress”
Lowpeisejia2015.comscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowpeopletracking.xyzscore 20· not probed yet
lure words (login, verify, secure…) “track,tracking”TLD with a high abuse rate “xyz”
Lowpeptidehealth.fitscore 20· active website
brand in page title, not in the name “namecheap”
Lowperfectfinds88.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowpermitpayments.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowperrosdecaza.onlinescore 20· server error
brand in page title, not in the name “cloudflare”
Lowpersonpayments.xyzscore 20· not probed yet
lure words (login, verify, secure…) “payment,payments”TLD with a high abuse rate “xyz”
Lowpesquisa.shopscore 20· active website
brand in page title, not in the name “spotify”
Lowpetcareluna.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowpetirkenasekali.sitescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowpetlandau.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowpetsmartdaily.storescore 20· other
brand in page title, not in the name “cloudflare”
Lowphantexx.infoscore 20· active website
brand in page title, not in the name “wordpress”
Lowphantomtrail-games.lifescore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowphantomwave-games.helpscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowpharmaclaimsai.xyzscore 20· not probed yet
lure words (login, verify, secure…) “claim,claims”TLD with a high abuse rate “xyz”
Lowpharmatracking.xyzscore 20· not probed yet
lure words (login, verify, secure…) “track,tracking”TLD with a high abuse rate “xyz”
Lowphoenixcion.comscore 20· active website
brand in page title, not in the name “wordpress”

Same data as JSON: /api/zone/risk?day=2026-09-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.