Flagged newborn domains, Friday, September 25, 2026

11,420 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

many hyphens “3”very long name “30”TLD with a high abuse rate “xyz”
Lowradi-vsego-chelovechestva-up.beautyscore 18· active website
many hyphens “3”very long name “28”TLD with a high abuse rate “beauty”
Lowrecoverycounselingservices.orgscore 18· no DNS
lure words (login, verify, secure…) “recover,recovery,service,services”
Lowrobotsandservices.orgscore 18· active website
lure words (login, verify, secure…) “service,services”form submits over plain HTTP “http://robotsandservices.org/”
Lowru-portal-nalog-gov.sitescore 18· no DNS
lure words (login, verify, secure…) “gov,portal”many hyphens “3”
many hyphens “6”very long name “45”TLD with a high abuse rate “cfd”
Lowscotiabank.camscore 18echoes scotiabank· robots.txt denied
brand in the name “scotiabank”TLD with a high abuse rate “cam”
lure words (login, verify, secure…) “access,claim,claims,portal”
lure words (login, verify, secure…) “secure,service,services”
lure words (login, verify, secure…) “recover,recovery,refund,secure”
Lowsecuretracking.infoscore 18· boilerplate page
lure words (login, verify, secure…) “secure,track,tracking”
lure words (login, verify, secure…) “account,accounts,security”
Lowsecurity-accounts.infoscore 18· registrar placeholder
lure words (login, verify, secure…) “account,accounts,security”
Lowsecurity-accounts.storescore 18· registrar placeholder
lure words (login, verify, secure…) “account,accounts,security”
lure words (login, verify, secure…) “service,services,support”
lure words (login, verify, secure…) “service,services”many hyphens “3”
Lowsistemainstitutopequenosanjos.sitescore 18· active website
very long name “29”login form “has_form+login words”
Lowskycustomersupport.onlinescore 18· blocked the probe
lure words (login, verify, secure…) “customer,customers,support”
Lowsouthernsupportiveservices.orgscore 18· no DNS
lure words (login, verify, secure…) “service,services,support”
lure words (login, verify, secure…) “customer,customers,support”
lure words (login, verify, secure…) “service,services,support”
Lowsteampaid.appscore 18· active website
form on a brand-styled page “has_form”
Lowstrana-pozharov-sezon-serial.cfdscore 18· active website
many hyphens “3”very long name “28”TLD with a high abuse rate “cfd”
Lowstudent-na-poslednem-ryadu-rf.yachtsscore 18· active website
many hyphens “4”very long name “29”TLD with a high abuse rate “yachts”
many hyphens “6”very long name “39”TLD with a high abuse rate “skin”
many hyphens “6”very long name “43”TLD with a high abuse rate “cfd”
lure words (login, verify, secure…) “service,services,support”
Lowsynckraken.infoscore 18· redirects elsewhere
form on a brand-styled page “has_form”
many hyphens “4”very long name “37”TLD with a high abuse rate “xyz”
Lowtax-refunds.netscore 18
lure words (login, verify, secure…) “refund,refunds,tax”
lure words (login, verify, secure…) “portal,service,services”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
Lowtsygane-ulitsa-shekspira-hit.cyouscore 18· active website
many hyphens “3”very long name “28”TLD with a high abuse rate “cyou”
Lowuaress-manaagarr-supporstt-veriiads.autosscore 18· redirect not followed
many hyphens “3”very long name “35”TLD with a high abuse rate “autos”
Lowubiystva-na-stantsii-perrish-serial.momscore 18· active website
many hyphens “4”very long name “35”TLD with a high abuse rate “mom”
Lowulitsy-razbitykh-fonarey-2026-lord.restscore 18· active website
many hyphens “4”very long name “34”TLD with a high abuse rate “rest”
Lowulitsy-razbitykh-fonarey-serial.cyouscore 18· active website
many hyphens “3”very long name “31”TLD with a high abuse rate “cyou”
many hyphens “5”very long name “39”TLD with a high abuse rate “beauty”
Lowuniver-13-let-spustja-smotret.icuscore 18· active website
many hyphens “4”very long name “29”TLD with a high abuse rate “icu”
Lowuniver-15-let-spustja-smotret.icuscore 18· not probed yet
many hyphens “4”very long name “29”TLD with a high abuse rate “icu”
Lowuniver-15-let-spustya-2026-kino.cyouscore 18· active website
many hyphens “5”very long name “31”TLD with a high abuse rate “cyou”
Lowuniver-15-let-spustya-serial.autosscore 18· active website
many hyphens “4”very long name “28”TLD with a high abuse rate “autos”
many hyphens “5”very long name “43”TLD with a high abuse rate “rest”
Lowvzp-id-gov-cz.casascore 18· blocked the probe
lure words (login, verify, secure…) “gov,id”many hyphens “3”
lure words (login, verify, secure…) “validation”very long name “34”TLD with a high abuse rate “top”
many hyphens “4”very long name “37”TLD with a high abuse rate “xyz”
lure words (login, verify, secure…) “delivery,service,services”
Lowxn-----6kccahlclydcfrjpcuhpcgeb9a1d.sitescore 18· active website
punycode name “кодирование-от-алкоголизма scripts=CYRIL”
Lowxn-----6kckadmbb0agjii7abisd4amhr7e.sitescore 18· boilerplate page
punycode name “сантехник-сергей-новиков scripts=CYRILLI”
Lowxn-----btdcan0ame7a8lvatqx9b.sitescore 18· active website
punycode name “تاكسي-فهد-الاحمد scripts=ARABIC”

Same data as JSON: /api/zone/risk?day=2026-09-25&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.