Flagged newborn domains, Friday, October 16, 2026

16,690 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowcruiseairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowcrumpleportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowcrunchairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowcrusadeportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowcrushairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowcrushdelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowcrushofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowcrushpassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowcryorevolution.comscore 14echoes revolut
brand in the name “revolut”
Lowcryptofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowcryptpassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowcsportal.funscore 14· empty page
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “fun”
Lowcuan128server.orgscore 14· active website
login form “has_form+login words”
Lowcubansecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowcubicsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowcuisineportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowcunningportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowcuoresecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowcupidsairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowcupidsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowcurateairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowcuredofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowcuressecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowcuriousportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowcurrencyreset.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reset”TLD with a high abuse rate “xyz”
Lowcurrentportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowcurveairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowcurvedelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowcurveofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowcurvepassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowcurvesairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowcustomaccount.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowcustomer-authentication270.icuscore 14· empty page
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “icu”
Lowcustomeradmin.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomerafter.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeraging.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeragree.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeralarm.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeralien.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeralone.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomerangel.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeranime.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeraroma.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeraudio.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomeraward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomerazuki.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomerbadge.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomerbaker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomerbanks.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”
Lowcustomerbasic.xyzscore 14· not probed yet
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.