Flagged newborn domains, Tuesday, September 1, 2026

12,278 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowmcdonoughgatreeservices.comscore 12· no DNS
lure words (login, verify, secure…)service,services
very long name57TLD with a high abuse rateclick
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)member,update
lure words (login, verify, secure…)member,members
Lowmembers.pubscore 12· suspended
lure words (login, verify, secure…)member,members
Lowmembersonly.pubscore 12· suspended
lure words (login, verify, secure…)member,members
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)account,accounts
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowmexiph.shopscore 12· active website
page sells counterfeit pharmano prescription required
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowmikehandymanserviceswa.comscore 12· active website
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowmisingfamilymembers.orgscore 12· not probed yet
lure words (login, verify, secure…)member,members
Lowmislibet-guncelgirislerimizburasi.camscore 12· placeholder page
very long name33TLD with a high abuse ratecam
Lowmislibet-resmigirislerimizburasi.camscore 12· placeholder page
very long name32TLD with a high abuse ratecam
Lowmislibet-trgirislerimizburasi.camscore 12· placeholder page
very long name29TLD with a high abuse ratecam
lure words (login, verify, secure…)service,services
Lowmissionhealthservices.claimsscore 12· no web server
lure words (login, verify, secure…)service,services
Lowmissionhealthservices.infoscore 12· no web server
lure words (login, verify, secure…)service,services
Lowmissionhealthservices.storescore 12· no web server
lure words (login, verify, secure…)service,services
very long name57TLD with a high abuse rateclick
lure words (login, verify, secure…)service,services
Lowmn-services.proscore 12· active website
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)reward,rewards
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)recover,recovery
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
lure words (login, verify, secure…)service,services
Lowmpprentrewards.bizscore 12· robots.txt denied
lure words (login, verify, secure…)reward,rewards
lure words (login, verify, secure…)reward,rewards
Lowmpprentrewards.infoscore 12· boilerplate page
lure words (login, verify, secure…)reward,rewards
Lowmpprentrewards.onlinescore 12· boilerplate page
lure words (login, verify, secure…)reward,rewards
Lowmpprentrewards.orgscore 12· robots.txt denied
lure words (login, verify, secure…)reward,rewards
Lowmprentrewards.bizscore 12· robots.txt denied
lure words (login, verify, secure…)reward,rewards
lure words (login, verify, secure…)reward,rewards
Lowmprentrewards.infoscore 12· boilerplate page
lure words (login, verify, secure…)reward,rewards
Lowmprentrewards.onlinescore 12· robots.txt denied
lure words (login, verify, secure…)reward,rewards

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.