Flagged newborn domains, Wednesday, September 30, 2026

10,685 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

lure words (login, verify, secure…) “login,portal”many hyphens “3”
lure words (login, verify, secure…) “service,services,tax”
Lowluntik-obratnaya-storona-luny-2026.monsterscore 18· active website
many hyphens “4”very long name “34”TLD with a high abuse rate “monster”
lure words (login, verify, secure…) “security,service,services”
Lowmatchyourmedicare.comscore 18· active website
form on a brand-styled page “has_form”
Lowmatchyourmedicare.orgscore 18· active website
form on a brand-styled page “has_form”
Lowmdbillingservices1.onlinescore 18· not probed yet
lure words (login, verify, secure…) “billing,service,services”
Lowmdbillingservicesll.onlinescore 18· empty page
lure words (login, verify, secure…) “billing,service,services”
lure words (login, verify, secure…) “helpdesk,member,members”
Lownalog-portals-rus-gov.onlinescore 18· no web server
lure words (login, verify, secure…) “gov,portal”many hyphens “3”
Lownalog-portals-rus-gov.sitescore 18· no web server
lure words (login, verify, secure…) “gov,portal”many hyphens “3”
Lownewappleiphone.comscore 18· active website
form on a brand-styled page “has_form”
Lowo-moyom-pererozhdenii-v-sliz-seriya.skinscore 18· no web server
many hyphens “5”very long name “35”TLD with a high abuse rate “skin”
many hyphens “3”very long name “30”TLD with a high abuse rate “autos”
Lowonline-pokies-instant-withdrawal.sbsscore 18· not probed yet
many hyphens “3”very long name “32”TLD with a high abuse rate “sbs”
Lowoutlander-blood-of-my-blood-lordserial.topscore 18· active website
many hyphens “5”very long name “38”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “confirm,confirmation,password”
Lowpay-service-customer.shopscore 18· no DNS
lure words (login, verify, secure…) “customer,pay,service”
Lowpayid-casino-minimum-deposit.workscore 18· not probed yet
many hyphens “3”very long name “28”TLD with a high abuse rate “work”
lure words (login, verify, secure…) “member,members,service,services”
Lowpokies-instant-withdrawal-payid.lolscore 18· not probed yet
many hyphens “3”very long name “31”TLD with a high abuse rate “lol”
Lowpokies-instant-withdrawal-payid.workscore 18· not probed yet
many hyphens “3”very long name “31”TLD with a high abuse rate “work”
Lowpostuchis-v-moyu-dver-seriya.restscore 18· no web server
many hyphens “4”very long name “28”TLD with a high abuse rate “rest”
many hyphens “4”very long name “40”TLD with a high abuse rate “monster”
lure words (login, verify, secure…) “refund,refunds,service,services”
lure words (login, verify, secure…) “service,services”many hyphens “3”
many hyphens “3”very long name “35”TLD with a high abuse rate “autos”
many hyphens “3”very long name “29”TLD with a high abuse rate “autos”
many hyphens “7”very long name “35”TLD with a high abuse rate “homes”
lure words (login, verify, secure…) “payment,payments,refund”
many hyphens “3”very long name “38”TLD with a high abuse rate “autos”
Lowreplica-watches.topscore 18· active website
TLD with a high abuse rate “top”page sells replica goods “Replica Watch”
lure words (login, verify, secure…) “recover,recovery,reset”
Lowromanovy-predannost-i-predatelstvo.monsterscore 18· active website
many hyphens “3”very long name “34”TLD with a high abuse rate “monster”
lure words (login, verify, secure…) “alert,alerts,secure”
Lowseks-v-bolshom-gorode-seriya.hairscore 18· no web server
many hyphens “4”very long name “28”TLD with a high abuse rate “hair”
lure words (login, verify, secure…) “service,services,support”
lure words (login, verify, secure…) “service,services,support”
Lowstart-99voice00-v00gcon-listen44note.topscore 18· boilerplate page
many hyphens “3”very long name “36”TLD with a high abuse rate “top”
Lowsteamrange.comscore 18· blocked the probe
form on a brand-styled page “has_form”
many hyphens “6”very long name “41”TLD with a high abuse rate “homes”
Lowsupportsandservices.onlinescore 18· server error
lure words (login, verify, secure…) “service,services,support”
Lowtainyi-dnevnik-veriti-lordfilm.topscore 18· active website
many hyphens “3”very long name “30”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “account,service,services”
Lowteslamarketfirm.livescore 18· active website
form on a brand-styled page “has_form”
Lowthailedger.sitescore 18· active website
form on a brand-styled page “has_form”
Lowtheamericanledger.sitescore 18· active website
form on a brand-styled page “has_form”
Lowtherakyatledger.orgscore 18· active website
form on a brand-styled page “has_form”
Lowubereatmanager.onlinescore 18· active website
form on a brand-styled page “has_form”
Lowuser-security-account-name.wikiscore 18· boilerplate page
lure words (login, verify, secure…) “account,security”many hyphens “3”

Same data as JSON: /api/zone/risk?day=2026-09-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.