Flagged newborn domains, Saturday, September 26, 2026

9,661 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowhospitalalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowhotelsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowhousingaccess.xyzscore 14· not probed yet
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowhousingmember.xyzscore 14· not probed yet
lure words (login, verify, secure…) “member”TLD with a high abuse rate “xyz”
Lowhousingsecures.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowhr-proland.techscore 14· active website
login form “has_form+login words”
Lowhswebdesign.shopscore 14· active website
page pushes urgent payment “LIMITED TIME OFFER”
Lowhuffnevenmorepuff.gamesscore 14echoes venmo· not probed yet
brand in the name “venmo”
Lowhumancounterweight.orgscore 14· blocked the probe
login form “has_form+login words”
Lowhungrypayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowhunter-x-hunter-lordserial.camscore 14· active website
many hyphens “3”TLD with a high abuse rate “cam”
Lowhybridfrontiervest.livescore 14· active website
page pushes urgent payment “risk-free”
Lowhybridsecures.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowhyena.teamscore 14· active website
login form “has_form+login words”
Lowhyperunlocker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowid-60418.cfdscore 14· no web server
lure words (login, verify, secure…) “id”TLD with a high abuse rate “cfd”
Lowid-c29312.sbsscore 14· not probed yet
lure words (login, verify, secure…) “id”TLD with a high abuse rate “sbs”
Lowid-doloribus-facilis.autosscore 14· robots.txt denied
lure words (login, verify, secure…) “id”TLD with a high abuse rate “autos”
Lowid-gwp168.lolscore 14· excluded
lure words (login, verify, secure…) “id”TLD with a high abuse rate “lol”
Lowid-v349219.sbsscore 14· not probed yet
lure words (login, verify, secure…) “id”TLD with a high abuse rate “sbs”
Lowilovehillary.lifescore 14· active website
login form “has_form+login words”
Lowim-token-xjp-cdn.autosscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “autos”
Lowim-token-xjp-cdn.beautyscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “beauty”
Lowim-token-xjp-cdn.cfdscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “cfd”
Lowim-token-xjp-cdn.clickscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “click”
Lowim-token-xjp-cdn.cyouscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “cyou”
Lowim-token-xjp-cdn.homesscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “homes”
Lowim-token-xjp-cdn.lolscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “lol”
Lowim-token-xjp-cdn.monsterscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “monster”
Lowim-token-xjp-cdn.questscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “quest”
Lowim-token-xjp-cdn.sbsscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “sbs”
Lowim-token-xjp-cdn.xyzscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “xyz”
Lowimmersive-secure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowimmersive-verified.xyzscore 14· not probed yet
lure words (login, verify, secure…) “verified”TLD with a high abuse rate “xyz”
Lowimmersiveclaim.xyzscore 14· not probed yet
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”
Lowimmersivemember.xyzscore 14· not probed yet
lure words (login, verify, secure…) “member”TLD with a high abuse rate “xyz”
Lowimmersivesecures.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowimmersivetrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowimmunicare.sitescore 14· active website
login form “has_form+login words”
Lowimportsecures.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowimpostasoggiorno.sitescore 14· active website
login form “has_form+login words”
Lowincomesecures.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowindexdelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowinfidelitylens.comscore 14echoes fidelity
brand in the name “fidelity”
Lowinfiniteretirementaccount.lolscore 14· active website
lure words (login, verify, secure…) “account”TLD with a high abuse rate “lol”
Lowinfluencerportalgr.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowinstantsecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowinstantsecures.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowinstantworldupdates.xyzscore 14· no DNS
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowinsurancealert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-09-26&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.