Flagged newborn domains, Thursday, August 27, 2026

17,538 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

lure words (login, verify, secure…)help,recover,recovery
Lowrecoverysupporttb.storescore 18· empty page
lure words (login, verify, secure…)recover,recovery,support
many hyphens3very long name28TLD with a high abuse ratetop
many hyphens3very long name30TLD with a high abuse ratetop
lure words (login, verify, secure…)member,members,reset
many hyphens4very long name35TLD with a high abuse ratetop
many hyphens3very long name31TLD with a high abuse ratetop
many hyphens4very long name32TLD with a high abuse ratetop
many hyphens5very long name31TLD with a high abuse ratetop
many hyphens5very long name32TLD with a high abuse ratetop
many hyphens3very long name31TLD with a high abuse ratetop
lure words (login, verify, secure…)login,portal,secure
lure words (login, verify, secure…)service,services,signin
Lowsistemnyaklinikpkumuhammadiah.sitescore 18· active website
very long name29login formhas_form+login words
many hyphens3very long name30TLD with a high abuse ratemonster
Lowsteamcleanerparts.comscore 18· active website
form on a brand-styled pagehas_form
Lowsteamfriends.livescore 18· active website
form on a brand-styled pagehas_form
lure words (login, verify, secure…)service,services,tax
lure words (login, verify, secure…)supportvery long name32TLD with a high abuse ratecfd
lure words (login, verify, secure…)supportvery long name32TLD with a high abuse rateclick
lure words (login, verify, secure…)service,services,support
lure words (login, verify, secure…)payment,payments,support
lure words (login, verify, secure…)payment,payments,support
lure words (login, verify, secure…)service,services,support
Lowtaksi-pod-prikrytiem-smotrim.hairscore 18· no web server
many hyphens3very long name28TLD with a high abuse ratehair
many hyphens3very long name31TLD with a high abuse ratemom
many hyphens3very long name28TLD with a high abuse ratexyz
Lowthicket-marlow-quinsy-dovetail.questscore 18· robots.txt denied
many hyphens3very long name30TLD with a high abuse ratequest
many hyphens4very long name29TLD with a high abuse rateclick
lure words (login, verify, secure…)invoice,track,tracking
many hyphens6very long name40TLD with a high abuse ratehair
lure words (login, verify, secure…)claim,claims,service
Lowubercolis.storescore 18· placeholder page
form on a brand-styled pagehas_form
many hyphens4very long name31TLD with a high abuse rateskin
lure words (login, verify, secure…)secure,service,services
Lowuser-verrifycoding-uid527273668-jos.icuscore 18· no web server
many hyphens3very long name35TLD with a high abuse rateicu
lure words (login, verify, secure…)securevery long name36TLD with a high abuse rateskin
lure words (login, verify, secure…)claim,claims,service,services
many hyphens3very long name29TLD with a high abuse ratetop
Lowveobooking.appscore 18· active website
form on a brand-styled pagehas_form
Lowvickiworkman-revolutionrealtyinc.onlinescore 18echoes revolut· active website
brand in the namerevolutvery long name32
many hyphens3very long name29TLD with a high abuse ratetop
many hyphens3very long name28TLD with a high abuse ratetop
many hyphens3very long name29TLD with a high abuse ratetop
Lowwallstreetledger.orgscore 18· active website
form on a brand-styled pagehas_form
many hyphens4very long name47TLD with a high abuse ratesbs
many hyphens4very long name47TLD with a high abuse ratesbs
many hyphens4very long name47TLD with a high abuse ratecfd
many hyphens4very long name47TLD with a high abuse ratesbs
many hyphens4very long name47TLD with a high abuse ratecfd

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.