Flagged newborn domains, Monday, August 31, 2026

6,851 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)security,support
Lowcypresstreeservices.comscore 12· no web server
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowcyprushealthservices.orgscore 12· active website
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowdaguservices.sitescore 12· boilerplate page
lure words (login, verify, secure…)service,services
Lowdamagecontrolservices.companyscore 12· placeholder page
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowdapurtoto-services3.shopscore 12· blocked the probe
lure words (login, verify, secure…)service,services
Lowdata-services-aus.onlinescore 12· not probed yet
lure words (login, verify, secure…)service,services
Lowdatarecovery.blogscore 12· active website
lure words (login, verify, secure…)recover,recovery
lure words (login, verify, secure…)recover,recovery
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
very long name32TLD with a high abuse ratecfd
Lowdedebet-turkiye-girislerimiz.camscore 12· placeholder page
very long name28TLD with a high abuse ratecam
Lowdeneme-bonusu-veren-siteler.artscore 12· robots.txt denied
lure words (login, verify, secure…)bonusmany hyphens3
Lowdeserteliteservices.infoscore 12· redirects elsewhere
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
very long name46TLD with a high abuse rateicu
lure words (login, verify, secure…)service,services
Lowdfkfinancialservices.orgscore 12· boilerplate page
lure words (login, verify, secure…)service,services
Lowdhbrecovery.comscore 12
lure words (login, verify, secure…)recover,recovery
Lowdifferentmembersonebody.orgscore 12· active website
lure words (login, verify, secure…)member,members
Lowdigcservices.comscore 12
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowdivinecareservices.storescore 12· no web server
lure words (login, verify, secure…)service,services
Lowdjservicestx.comscore 12· blocked the probe
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowdomainservices.proscore 12· no DNS
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowdouglasservices.netscore 12· empty page
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)recover,recovery
very long name56TLD with a high abuse ratetop
very long name56TLD with a high abuse ratetop
Lowdsfamilycleaningservices.comscore 12· boilerplate page
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)recover,recovery
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.