Flagged newborn domains, Friday, October 16, 2026

16,690 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowexploreportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowexportairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowexportalchemy.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowexportpackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowexportsupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowexpoundportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowexpressportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowexpservice.xyzscore 14· no web server
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowextendaccount.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowextendairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowextendpackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowextendservice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowextendsupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowextendtracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowexternairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowextolsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowextotrade.orgscore 14· active website
login form “has_form+login words”
Lowextraairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowextradelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowextrapassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowextrasecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowextremereward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowextremesecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowextremeunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowextremeupdate.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowextremewinner.xyzscore 14· not probed yet
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “xyz”
Lowexultsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Loweyeballportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Loweyriesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowfablesairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowfabricairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowfabuloustrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowfacialairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowfacileairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowfactionportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowfactoraccount.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowfactorairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowfactorpackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowfactorservice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowfactorsupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowfactortracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowfactssecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowfaelorquandrix.sitescore 14· active website
page pushes urgent payment “Congratulations You”
Lowfairiesportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowfairyairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowfairydelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowfairyofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowfairypassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowfairysecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowfaithsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.