Flagged newborn domains, Friday, October 23, 2026

17,155 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Lowempiricsairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowemployeeairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowemployeesportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowemployerpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowemploymentalert.xyzscore 14· not probed yet
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “xyz”
Lowempresssecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowemulatesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowemulationportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowemulatorairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowenceladusportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowencodingairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowencounterportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowencryptairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowencryptdelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowencryptofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowencryptpassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowencryptsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowendangerairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowendangerpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowendeavorairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowendeavourportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowendlessairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowendlessdelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowendlessofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowendlesspassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowenduranceportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowendymionairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowendymionpayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowenergeticportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowengagementpictures.livescore 14· active website
login form “has_form+login words”
Lowengagingairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowengenderairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowengineerservice.xyzscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “xyz”
Lowenglishairdrops.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowenglishdelivery.xyzscore 14· not probed yet
lure words (login, verify, secure…) “delivery”TLD with a high abuse rate “xyz”
Lowenglishofficial.xyzscore 14· not probed yet
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowenglishpassword.xyzscore 14· not probed yet
lure words (login, verify, secure…) “password”TLD with a high abuse rate “xyz”
Lowenglishsecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowenhancesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowenkindleairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowenlargesecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowenlightenportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowenormousairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowenquiresecurity.xyzscore 14· not probed yet
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowensembleairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowensemblepayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”
Lowentertainportal.xyzscore 14· not probed yet
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Lowenthrallairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowenticingairdrop.xyzscore 14· not probed yet
lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
Lowentirelypayment.xyzscore 14· not probed yet
lure words (login, verify, secure…) “payment”TLD with a high abuse rate “xyz”

Same data as JSON: /api/zone/risk?day=2026-10-23&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.