Flagged newborn domains, Tuesday, November 3, 2026

9,531 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Low5hbet.latscore 14· active website
login form “has_form+login words”
Low5jililogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low5jllogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low5jllogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low639clublogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low639jllogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low63phlogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low63phlogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low65bonusvault.xyzscore 14· boilerplate page
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “xyz”
Low66winlogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low66winlogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low711betlogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low711betlogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low747livelogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low747livelogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low777publogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low777publogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low77jllogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low77jllogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low77phlogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low77phlogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low789tayalogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low789tayalogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low7gamelogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low7gamelogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low7jllogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low7jllogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low7slots-bonuslar.clickscore 14· active website
lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “click”
Low83a-1-nc5-tr.xyzscore 14· no web server
many hyphens “3”TLD with a high abuse rate “xyz”
Low86-eighty-six-jutsu.camscore 14· active website
many hyphens “3”TLD with a high abuse rate “cam”
Low888phllogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low888phplogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low888phplogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low88jllogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low88jllogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low8k8login.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low8k8login.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low90jililogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low90jililogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low91phlogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low91phlogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low93jllogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low93jllogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Low9f.latscore 14· active website
login form “has_form+login words”
Low9phlogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Low9phlogin.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”
Lowaaajililogin.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Lowaadhar.techscore 14· active website
login form “has_form+login words”
Lowabc8login.cyouscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cyou”
Lowabc8login.icuscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “icu”

Same data as JSON: /api/zone/risk?day=2026-11-03&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.