Flagged newborn domains, Thursday, October 29, 2026

9,579 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

lure words (login, verify, secure…) “login,portal”many hyphens “3”
Lowlt-prod-app-api-services.cloudscore 18· no DNS
lure words (login, verify, secure…) “service,services”many hyphens “4”
Lowlyubov-v-bolshom-gorode-lordfilm.cfdscore 18· active website
many hyphens “4”very long name “32”TLD with a high abuse rate “cfd”
Lowlyudi-iks-nachalo-rosomakha-lordfilm.cfdscore 18· active website
many hyphens “4”very long name “36”TLD with a high abuse rate “cfd”
Lowmato-seihei-no-slave-animego.cfdscore 18· active website
many hyphens “4”very long name “28”TLD with a high abuse rate “cfd”
Lowmedicarelocalplan.comscore 18· active website
form on a brand-styled page “has_form”
Lowmir-druzhba-zhvachka-novinka.hairscore 18· no web server
many hyphens “3”very long name “28”TLD with a high abuse rate “hair”
Lowmorskaja-politsija-spetsotdel-lordfilm.cfdscore 18· active website
many hyphens “3”very long name “38”TLD with a high abuse rate “cfd”
Lownashe-lyubimoe-leto-lordfilm.cfdscore 18· active website
many hyphens “3”very long name “28”TLD with a high abuse rate “cfd”
lure words (login, verify, secure…) “service,services,signin”
Lowne-smotrite-naverkh-lordfilm.cfdscore 18· active website
many hyphens “3”very long name “28”TLD with a high abuse rate “cfd”
Lownepobedimyy-atomnaya-eva-lordfilm.cfdscore 18· active website
many hyphens “3”very long name “33”TLD with a high abuse rate “cfd”
Lownepravilnyy-sposob-ispolzovaniya-jutsu.cfdscore 18· active website
many hyphens “3”very long name “38”TLD with a high abuse rate “cfd”
Lowoffice365.bzhscore 18echoes office365· no DNS
brand in the name “office365”brand plus digits “office365”
Lowofficialraycharlesdocumentary.xyzscore 18· not probed yet
lure words (login, verify, secure…) “official”very long name “29”TLD with a high abuse rate “xyz”
Lowonlinecustomersupport.infoscore 18· robots.txt denied
lure words (login, verify, secure…) “customer,customers,support”
Lowopasnost-v-moyom-serdtse-jutsu.cfdscore 18· active website
many hyphens “4”very long name “30”TLD with a high abuse rate “cfd”
lure words (login, verify, secure…) “auth,portal”many hyphens “4”
Lowozgurledger.shopscore 18· active website
form on a brand-styled page “has_form”
Lowpastureledger.shopscore 18· active website
form on a brand-styled page “has_form”
Lowpiraty-karibskogo-morja-lordfilm.cfdscore 18· active website
many hyphens “3”very long name “32”TLD with a high abuse rate “cfd”
Lowpolitseyskiy-s-rublyovki-new.restscore 18· no web server
many hyphens “3”very long name “28”TLD with a high abuse rate “rest”
Lowpolitseyskiy-s-rublyovki-prime.homesscore 18· active website
many hyphens “3”very long name “30”TLD with a high abuse rate “homes”
Lowpolitseyskiy-s-rublyovki-watch.homesscore 18· no web server
many hyphens “3”very long name “30”TLD with a high abuse rate “homes”
Lowproject-inform-que-base-87d4.icuscore 18· boilerplate page
many hyphens “4”very long name “28”TLD with a high abuse rate “icu”
lure words (login, verify, secure…) “reward,rewards,service”
Lowroyalbank-accountsecurity.helpscore 18· not probed yet
lure words (login, verify, secure…) “account,accounts,security”
Lowru-apple.icuscore 18echoes apple· robots.txt denied
ambiguous brand word “apple”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”
lure words (login, verify, secure…) “account,service,services”
Lowsecure-connection-tunnel098182.cfdscore 18· boilerplate page
lure words (login, verify, secure…) “secure”very long name “30”TLD with a high abuse rate “cfd”
Lowsecure-connection-tunnel153778.cfdscore 18· boilerplate page
lure words (login, verify, secure…) “secure”very long name “30”TLD with a high abuse rate “cfd”
Lowsecure-connection-tunnel165532.cfdscore 18· boilerplate page
lure words (login, verify, secure…) “secure”very long name “30”TLD with a high abuse rate “cfd”
Lowsecure-connection-tunnel339499.cfdscore 18· boilerplate page
lure words (login, verify, secure…) “secure”very long name “30”TLD with a high abuse rate “cfd”
Lowsecure-connection-tunnel528509.cfdscore 18· boilerplate page
lure words (login, verify, secure…) “secure”very long name “30”TLD with a high abuse rate “cfd”
lure words (login, verify, secure…) “secure,service,services”
lure words (login, verify, secure…) “access,portal,secure”
Lowshopify.xyzscore 18echoes shopify· no DNS
brand in the name “shopify”TLD with a high abuse rate “xyz”
Lowsorvigolova-rozhdennyy-zanovo-lordfilm.cfdscore 18· active website
many hyphens “3”very long name “38”TLD with a high abuse rate “cfd”
Lowspartak-spartak-krov-i-pesok-lordfilm.cfdscore 18· active website
many hyphens “5”very long name “37”TLD with a high abuse rate “cfd”
Lowstarlingrobotics.orgscore 18· active website
form on a brand-styled page “has_form”
lure words (login, verify, secure…) “service,services,taxes”
Lowsupportmailrecovery1.supportscore 18· blocked the probe
lure words (login, verify, secure…) “recover,recovery,support”
many hyphens “3”very long name “34”TLD with a high abuse rate “autos”
Lowtesla-cloud.topscore 18echoes tesla· no DNS
ambiguous brand word “tesla”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Lowtg-help-alerts.onlinescore 18· boilerplate page
lure words (login, verify, secure…) “alert,alerts,help”
Lowtg-security-alerts.onlinescore 18· boilerplate page
lure words (login, verify, secure…) “alert,alerts,security”
Lowtg-verify-alerts.onlinescore 18· boilerplate page
lure words (login, verify, secure…) “alert,alerts,verify”
Lowthegulfledger.orgscore 18· active website
form on a brand-styled page “has_form”
Lowtheinsuranceledger.netscore 18· active website
form on a brand-styled page “has_form”
lure words (login, verify, secure…) “service,services,signin”

Same data as JSON: /api/zone/risk?day=2026-10-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.