Flagged newborn domains, Thursday, October 29, 2026

9,579 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

many hyphens “3”free DNS provider “dnsowl.com”
Lowsaveup.devscore 14· active website
login form “has_form+login words”
Lowsebaya-hub.onlinescore 14echoes ebay· empty page
brand in the name “ebay”
Lowsecuredocsx.icuscore 14· redirects elsewhere
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “icu”
Lowsecureguard.clickscore 14· boilerplate page
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “click”
Lowsecurestay.clickscore 14· active website
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “click”
Lowsecurety.autosscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “autos”
Lowsecurety.beautyscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “beauty”
Lowsecurety.cfdscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “cfd”
Lowsecurety.clickscore 14· no DNS
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “click”
Lowsecurety.sbsscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “sbs”
Lowsecurety.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecuretymrmory.autosscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “autos”
Lowsecuretymrmory.beautyscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “beauty”
Lowsecuretymrmory.homesscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “homes”
Lowsecuretymrmory.monsterscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “monster”
Lowsecuretymrmory.questscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “quest”
Lowsecuretymrmory.sbsscore 14· empty page
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “sbs”
Lowsecuretymrmory.xyzscore 14· not probed yet
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “xyz”
Lowsecureus.sbsscore 14· active website
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “sbs”
Lowsecuritycard.xyzscore 14· excluded
lure words (login, verify, secure…) “security”TLD with a high abuse rate “xyz”
Lowseesight.appscore 14· active website
login form “has_form+login words”
Lowselectwarespacebays.comscore 14echoes ebay
brand in the name “ebay”
Lowserverservicefilereturn.topscore 14· empty page
lure words (login, verify, secure…) “service”TLD with a high abuse rate “top”
Lowservice-esl-org.cfdscore 14· no DNS
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowservice-esl.cfdscore 14· no DNS
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowservicenow.clickscore 14· boilerplate page
lure words (login, verify, secure…) “service”TLD with a high abuse rate “click”
Lowservicenowpro.clickscore 14· no web server
lure words (login, verify, secure…) “service”TLD with a high abuse rate “click”
Lowsevenstripesoperations.comscore 14echoes stripe
brand in the name “stripe”
Lowshanghaicloudapp.comscore 14echoes icloud
brand in the name “icloud”
Lowsharkplay.vipscore 14· active website
login form “has_form+login words”
Lowshizelleolfacte.comscore 14echoes zelle
brand in the name “zelle”
Lowshopevertails.comscore 14· active website
page pushes urgent payment “RISK-FREE”
Lowshopratebetter.comscore 14· redirects elsewhere
login form “has_form+login words”
Lowshoptrailgoods.infoscore 14· active website
page pushes urgent payment “Limited Time Offer”
Lowshwedr.shopscore 14· active website
login form “has_form+login words”
Lowsignets.artscore 14· blocked the probe
login form “has_form+login words”
Lowsignetsfoundation.comscore 14· blocked the probe
login form “has_form+login words”
Lowsikatracks.xyzscore 14· not probed yet
lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”
Lowsimututma.onlinescore 14· active website
login form “has_form+login words”
Lowsipamdu.onlinescore 14· parked, for sale
login form “has_form+login words”
Lowsitnsleepbedding.shopscore 14· active website
page pushes urgent payment “risk-free”
Lowslimqa-canada.storescore 14· active website
page pushes urgent payment “LIMITED TIME OFFER”
Lowsmbscslogin.homesscore 14· boilerplate page
lure words (login, verify, secure…) “login”TLD with a high abuse rate “homes”
Lowsmmads.onlinescore 14· active website
login form “has_form+login words”
Lowsnipeofficial.xyzscore 14· no DNS
lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Lowsoftnape.storescore 14· active website
page pushes urgent payment “risk-free”
Lowsoftrevolutionary.comscore 14echoes revolut
brand in the name “revolut”
Lowsolarphantomportal.clickscore 14· active website
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “click”
many hyphens “3”TLD with a high abuse rate “autos”

Same data as JSON: /api/zone/risk?day=2026-10-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.