Flagged newborn domains, Tuesday, October 13, 2026

10,606 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowarmeportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowarmyportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowaromareset.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “xyz”
Lowarrowdump.comscore 14· empty page
login form “has_form+login words”
Lowart-and-ed-bazaar.topscore 14· server error
many hyphens “3”TLD with a high abuse rate “top”
Lowartistic-revolution-store.comscore 14echoes revolut
brand in the name “revolut”
Lowasanservice.topscore 14· active website
lure words (login, verify, secure…) “service”TLD with a high abuse rate “top”
Lowashairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowaskairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowaspairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowasripos.onlinescore 14· active website
login form “has_form+login words”
Lowasspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowatepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowaudiobookshelf.clubscore 14· active website
login form “has_form+login words”
Lowaudioreel.appscore 14· redirects elsewhere
login form “has_form+login words”
Lowaudioreset.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “xyz”
Lowauditreset.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “xyz”
Lowauravanguardconsulting.comscore 14echoes vanguard
brand in the name “vanguard”
Lowauserviceadmittance.topscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “top”
Lowaut-blitz-payout-casinos.funscore 14· boilerplate page
many hyphens “3”TLD with a high abuse rate “fun”
Lowauth-batch.cfdscore 14· active website
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “cfd”
Lowauth-proxy.cyouscore 14· active website
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “cyou”
Lowauth-session.cyouscore 14· active website
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “cyou”
Lowauth-signer.cfdscore 14· active website
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “cfd”
Lowauth-worker.cyouscore 14· active website
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “cyou”
Lowautovestix.linkscore 14· active website
login form “has_form+login words”
Lowautpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowautumnservice.sbsscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “sbs”
Lowavenmora.comscore 14echoes venmo
brand in the name “venmo”
Lowaviatorofficialsite.xyzscore 14· active website
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowawardalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowawardreset.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “xyz”
Lowaz-official17.xyzscore 14· active website
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowazino777-ee-official28.topscore 14· active website
lure words (login, verify, secure…) “official”TLD with a high abuse rate “top”
Lowazino777-tt-official22.xyzscore 14· active website
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowazino777-ww-official9.xyzscore 14· active website
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowazino777casinosofficial.lolscore 14· blocked the probe
lure words (login, verify, secure…) “official”TLD with a high abuse rate “lol”
Lowazino777officialzercalo41.funscore 14· active website
lure words (login, verify, secure…) “official”TLD with a high abuse rate “fun”
Lowazukialert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowazukireset.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “xyz”
Lowazukitrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowb-reed.orgscore 14· active website
login form “has_form+login words”
Lowb-win.funscore 14· not probed yet
lure words (login, verify, secure…) “win”TLD with a high abuse rate “fun”
Lowb3ntalaprivate.sitescore 14· active website
login form “has_form+login words”
Lowbabyreward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowbabytime.sitescore 14· active website
login form “has_form+login words”
Lowbabyunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowbabyupdate.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowbabywinner.xyzscore 14· not probed yet
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “xyz”
Lowbackupdate.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-10-13&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.