Flagged newborn domains, Friday, October 16, 2026

16,690 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowsecurepaypk.xyzscore 14· empty page
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecureprivateai.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecureprompthub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurepromptlab.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurerecallmap.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurerecordhub.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurerecordlab.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecureshellmesh.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretokenbank.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretokendesk.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretoolguard.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretoolvault.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretrailbank.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretrailbook.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretraildesk.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretrailgate.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretrailmesh.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretrailroom.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurevaultbank.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurevaultdesk.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurevaultflow.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurevaultnode.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecurevaultrail.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsellermate.techscore 14· active website
login form “has_form+login words”
Lowseramazonia.orgscore 14echoes amazon· excluded
brand in the name “amazon”
Lowservicebau.sbsscore 14· active website
lure words (login, verify, secure…) “service”TLD with a high abuse rate “sbs”
Lowservicechainmap.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowservicehub-pro.xyzscore 14· no web server
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowserviceinformatiqueroy.icuscore 14· registrar placeholder
lure words (login, verify, secure…) “service”TLD with a high abuse rate “icu”
Lowservicel.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowserviceless.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowservicemachinellc.helpscore 14· not probed yet
lure words (login, verify, secure…) “service”free DNS provider “dnsowl.com”
Lowservicepc.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowservicos-digitais-gov.onlinescore 14· robots.txt denied
lure words (login, verify, secure…) “gov”free DNS provider “dnsowl.com”
Lowsevagrantportal.lolscore 14· active website
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “lol”
Lowsexytiktoksegp.comscore 14echoes tiktok
brand in the name “tiktok”
Lowsexytiktoksgerm.comscore 14echoes tiktok· active website
brand in the name “tiktok”
Lowsexytiktoksgrec.comscore 14echoes tiktok
brand in the name “tiktok”
Lowsexytiktoksliv.comscore 14echoes tiktok
brand in the name “tiktok”
Lowsexytiktokspolsh.comscore 14echoes tiktok
brand in the name “tiktok”
lure words (login, verify, secure…) “official”free DNS provider “dnsowl.com”
Lowshared-database-api-poc.clickscore 14· no DNS
many hyphens “3”TLD with a high abuse rate “click”
Lowshe-wordpressrennsyuuyou.sitescore 14echoes wordpress· boilerplate page
brand in the name “wordpress”
Lowshiploud.devscore 14· active website
login form “has_form+login words”
Lowshopintuitionwithin.comscore 14echoes intuit
brand in the name “intuit”
Lowshopsupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowshort-video-service.topscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “top”
Lowsihydro.onlinescore 14· empty page
login form “has_form+login words”
Lowsilvergoldsupport.clickscore 14· no web server
lure words (login, verify, secure…) “support”TLD with a high abuse rate “click”
Lowsimpcityaccessforbidden.workscore 14· blocked the probe
lure words (login, verify, secure…) “access”TLD with a high abuse rate “work”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.