Flagged newborn domains, Saturday, September 26, 2026

9,661 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowalertobserver.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowalertpassport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowalertphysical.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowalertresearch.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowalertteachers.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowalertuniverse.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowalertwhitelist.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowallign.designscore 14· blocked the probe
login form “has_form+login words”
Lowallleadservice.sbsscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “sbs”
Lowalphaproject.worldscore 14· active website
login form “has_form+login words”
Lowaltynwallet.funscore 14· blocked the probe
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “fun”
Lowamandaeverythingpets.appscore 14· active website
login form “has_form+login words”
Lowanalysisclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowanalysistrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowanalyticsalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowanchorsecure.livescore 14· robots.txt denied
lure words (login, verify, secure…) “secure”free DNS provider “dnsowl.com”
Lowanimationclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowanimationtrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowannounceclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowannouncetrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowapp-auth-net.bondscore 14· no DNS
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “bond”
Lowapp-portal.clickscore 14· no DNS
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “click”
Lowapp-portalpj.clickscore 14· robots.txt denied
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “click”
Lowapplemapslogin.clickscore 14· empty page
lure words (login, verify, secure…) “login”TLD with a high abuse rate “click”
Lowapplemapslogin.restscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “rest”
Lowapurapetrolina.techscore 14· active website
login form “has_form+login words”
Lowar777play.comscore 14· active website
login form “has_form+login words”
Lowarchiveaccess.xyzscore 14· not probed yet
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowarchiveaccount.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowarchivebilling.xyzscore 14· not probed yet
lure words (login, verify, secure…) “billing”TLD with a high abuse rate “xyz”
Lowarchivemember.xyzscore 14· not probed yet
lure words (login, verify, secure…) “member”TLD with a high abuse rate “xyz”
Lowarchivesclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowarchivesecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowarchivestrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowarquivosaborosa.cloudscore 14· active website
login form “has_form+login words”
Lowartifactbonus.xyzscore 14· not probed yet
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “xyz”
Lowartifactclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowartworkservice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowartworktracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowasada.ingscore 14· active website
login form “has_form+login words”
Lowasmedclinic.orgscore 14· active website
login form “has_form+login words”
Lowassetsupporter.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowassetsupports.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowassistantprize.xyzscore 14· not probed yet
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “xyz”
Lowassistsecures.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowastraveli.appscore 14· active website
login form “has_form+login words”
Lowat-portal.sbsscore 14· active website
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “sbs”
Lowatb-official.sbsscore 14· robots.txt denied
lure words (login, verify, secure…) “official”TLD with a high abuse rate “sbs”
Lowatomicbilling.xyzscore 14· not probed yet
lure words (login, verify, secure…) “billing”TLD with a high abuse rate “xyz”
Lowatomicservice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-26&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.