Flagged newborn domains, Thursday, October 22, 2026

16,883 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowanimationupdate.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowanimationwinner.xyzscore 14· not probed yet
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “xyz”
Lowanimeaccountant.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowanimeaccounting.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowanimeboys-official.lolscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “lol”
Lowanimehardwallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowanimerefundable.xyzscore 14· not probed yet
lure words (login, verify, secure…) “refund”TLD with a high abuse rate “xyz”
Lowanimesoundtrack.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowanimesupporters.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowannounceaccount.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowannounceairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowannouncepackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowannouncepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowannounceservice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowannouncesupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowannouncetracker.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowannoyingairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowannoyingpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowannuitysecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowanonymousaccess.xyzscore 14· not probed yet
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowanonymouslookup.onlinescore 14· active website
login form “has_form+login words”
Lowanonymousmember.xyzscore 14· not probed yet
lure words (login, verify, secure…) “member”TLD with a high abuse rate “xyz”
Lowanonymousportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowanonymousreward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowanonymoussecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowanonymousunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowanonymousupdate.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowanonymouswinner.xyzscore 14· not probed yet
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “xyz”
Lowanselmosecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowansweringportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowanswerssecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowantennasecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowanthemssecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowanthonysecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowantidoteairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowantidotepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowantidotesportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowantipodesportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowantiquaryportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowantiquesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowantivirusportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowantoniosecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowantonymsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowanxietysecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowanxioussecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowanybodysecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowanythingairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowanythingpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowanytimesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowanywhereairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-10-22&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.