Flagged newborn domains, Wednesday, October 21, 2026

16,563 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowpresentservice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowpresentsportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowpresentsupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowpresenttracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowpreserveportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowprestigeportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowpresumeairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowpresumepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowpretendairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowpretendpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowprettysecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowpreventairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowpreviewaccount.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowpreviewpackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowpreviewservice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowpreviewsupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowpreviewtracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowpricessecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowprimarypackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowprinceairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowprincedelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowprinceofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowprincepassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowprincesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowprincespayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowprincessportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowprinterairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowprinterswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowprintingportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowpriorityportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowprisonerwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowprisonsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowprivacyaccount.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowprivacypackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowprivacysupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowprivatebilling.xyzscore 14· not probed yet
lure words (login, verify, secure…) “billing”TLD with a high abuse rate “xyz”
Lowprivateconfirm.xyzscore 14· not probed yet
lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “xyz”
Lowprivategmailnotifierbot.comscore 14echoes gmail
brand in the name “gmail”
Lowprivatepackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowprivaterecover.xyzscore 14· not probed yet
lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Lowprivatesupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowprivateupdates.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowprivatewallets.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowprivatewinners.xyzscore 14· not probed yet
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “xyz”
Lowprize.skinscore 14· boilerplate page
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “skin”
Lowprize3dprinter.xyzscore 14· not probed yet
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “xyz”
Lowprizealgorithm.xyzscore 14· not probed yet
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “xyz”
Lowprizedeveloper.xyzscore 14· not probed yet
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “xyz”
Lowprizediffusion.xyzscore 14· not probed yet
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “xyz”
Lowprizeecosystem.xyzscore 14· not probed yet
lure words (login, verify, secure…) “prize”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-10-21&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.