Flagged newborn domains, Tuesday, September 22, 2026

10,662 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowgpurefundable.xyzscore 14· not probed yet
lure words (login, verify, secure…) “refund”TLD with a high abuse rate “xyz”
Lowgrandpassaccess.xyzscore 14· active website
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowgrcriskportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowgrupposerviziclouding.cloudscore 14echoes icloud· registrar placeholder
brand in the name “icloud”
Lowgutterheroesco.orgscore 14· active website
login form “has_form+login words”
Lowgvavd.comscore 14· active website
login form “has_form+login words”
Lowgw-media.storescore 14· active website
login form “has_form+login words”
Lowh3ndrydata.onlinescore 14· active website
login form “has_form+login words”
Lowhabitatcharity.orgscore 14· active website
login form “has_form+login words”
Lowhackportalapp.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowhackportalhub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowhair-loss-solutions-xgwx.topscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “top”
Lowhalfbetunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowhalooglasiverification.xyzscore 14· no web server
lure words (login, verify, secure…) “verification”TLD with a high abuse rate “xyz”
Lowhappyincome.sitescore 14· active website
login form “has_form+login words”
Lowhashratebonus.xyzscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “xyz”
Lowheadwaters-fes.techscore 14· active website
login form “has_form+login words”
Lowhealthscopebrief.appscore 14· active website
login form “has_form+login words”
Lowheaps-of-wins-au.topscore 14· not probed yet
many hyphens “3”TLD with a high abuse rate “top”
Lowheaps-of-wins-online.topscore 14· server error
many hyphens “3”TLD with a high abuse rate “top”
Lowheldeskasindo.sitescore 14· active website
login form “has_form+login words”
Lowheleket-invoice.topscore 14· active website
lure words (login, verify, secure…) “invoice”TLD with a high abuse rate “top”
Lowhelpdeskarena.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskatlas.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskbench.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskbrief.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskchart.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskcheck.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskclerk.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskcoach.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskcraft.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskfolio.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskframe.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskgraph.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskguide.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdesklinks.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskmaker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskmatrix.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskpanel.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskpilot.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskprice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskpulse.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskquote.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskradar.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskrules.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdesksales.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskscale.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskscout.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskshelf.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”
Lowhelpdeskshell.xyzscore 14· not probed yet
lure words (login, verify, secure…) “helpdesk”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-22&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.