Flagged newborn domains, Thursday, October 22, 2026

16,883 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowuprightairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowuprightpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowuprisingportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowupstreamportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowupwardsairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowupwardspayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowurgentsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowus-support.sbsscore 14· empty page
lure words (login, verify, secure…) “support”TLD with a high abuse rate “sbs”
Lowusefulairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowusefuldelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowusefulofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowusefulpassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowusefulsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowutilityaccount.xyzscore 14· not probed yet
lure words (login, verify, secure…) “account”TLD with a high abuse rate “xyz”
Lowutilityairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowutilitypackage.xyzscore 14· not probed yet
lure words (login, verify, secure…) “package”TLD with a high abuse rate “xyz”
Lowutilitysupport.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowutilitywallets.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowutmostsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowutoolsprosms.onlinescore 14· active website
login form “has_form+login words”
Lowutopiadelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowutopiapassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowutopiasecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowvacantsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowvacatesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowvacationaccess.xyzscore 14· not probed yet
lure words (login, verify, secure…) “access”TLD with a high abuse rate “xyz”
Lowvacationmember.xyzscore 14· not probed yet
lure words (login, verify, secure…) “member”TLD with a high abuse rate “xyz”
Lowvacationportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowvacationreward.xyzscore 14· not probed yet
lure words (login, verify, secure…) “reward”TLD with a high abuse rate “xyz”
Lowvacationsecure.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowvacationunlock.xyzscore 14· not probed yet
lure words (login, verify, secure…) “unlock”TLD with a high abuse rate “xyz”
Lowvacationupdate.xyzscore 14· not probed yet
lure words (login, verify, secure…) “update”TLD with a high abuse rate “xyz”
Lowvacationwinner.xyzscore 14· not probed yet
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “xyz”
Lowvaccineswallet.xyzscore 14· not probed yet
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”
Lowvacuumsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowvaliantairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowvaliantpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowvalidityportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowvalleysecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowvaluableportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowvalueconfirmer.xyzscore 14· not probed yet
lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “xyz”
Lowvalueofficials.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowvaluesdimensions.appscore 14· active website
page pushes urgent payment “risk-free”
Lowvaluesupporter.xyzscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “xyz”
Lowvancouveralert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowvariableportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowvarianceportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowvariantsportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowvarietyairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowvectorsairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-10-22&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.