Flagged newborn domains, Wednesday, November 11, 2026

10,091 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

lure words (login, verify, secure…) “security,service,services”
Lowdrivenmobiledustlessblasting.comscore 18echoes venmo
brand in the name “venmo”very long name “28”
many hyphens “3”very long name “31”TLD with a high abuse rate “autos”
lure words (login, verify, secure…) “security,service,services”
lure words (login, verify, secure…) “service,services,support”
very long name “49”login form “has_form+login words”
Lowfbi-ic3-asset-recovery.orgscore 18· no DNS
lure words (login, verify, secure…) “recover,recovery”many hyphens “3”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
many hyphens “4”very long name “57”TLD with a high abuse rate “click”
many hyphens “3”very long name “28”TLD with a high abuse rate “autos”
lure words (login, verify, secure…) “access”very long name “40”TLD with a high abuse rate “cfd”
Lowgetpaymentsmith.onlinescore 18· active website
lure words (login, verify, secure…) “payment,payments”form submits over plain HTTP “http://getpaymentsmith.online/”
lure words (login, verify, secure…) “payment,payments,service,services”
lure words (login, verify, secure…) “recover,recovery,service”
lure words (login, verify, secure…) “account,service,services”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
Lowhome-reset-services.comscore 18· robots.txt denied
lure words (login, verify, secure…) “reset,service,services”
lure words (login, verify, secure…) “alert,alerts,track,tracking”
lure words (login, verify, secure…) “invoice,recover,recovery”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
lure words (login, verify, secure…) “recover,recovery,service,services”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
lure words (login, verify, secure…) “security,service,services”
Lowlanternsupportservices.orgscore 18· boilerplate page
lure words (login, verify, secure…) “service,services,support”
Lowlegacyandledger.carescore 18· active website
form on a brand-styled page “has_form”
lure words (login, verify, secure…) “portal,service”many hyphens “4”
lure words (login, verify, secure…) “recover,recovery,service,services”
Lowmymedicarecareerinsurance01-claim.helpscore 18· robots.txt denied
lure words (login, verify, secure…) “claim”very long name “33”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “recover,recovery,service”
lure words (login, verify, secure…) “customer,customers,support”
Lownobueno.winscore 18· active website
TLD with a high abuse rate “win”page sells replica goods “1:1 Copy”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
many hyphens “5”very long name “38”TLD with a high abuse rate “rest”
lure words (login, verify, secure…) “security,service,services”
Loworiz-centretrelinkservice-folder.icuscore 18· blocked the probe
lure words (login, verify, secure…) “service”very long name “32”TLD with a high abuse rate “icu”
lure words (login, verify, secure…) “customer,customers,service”
Lowplano-nacional-de-forma-o-financeira.topscore 18· not probed yet
many hyphens “5”very long name “36”TLD with a high abuse rate “top”
many hyphens “7”very long name “41”TLD with a high abuse rate “quest”
Lowproekt-anna-nikolaevna-smotret.hairscore 18· no web server
many hyphens “3”very long name “30”TLD with a high abuse rate “hair”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
many hyphens “3”very long name “57”TLD with a high abuse rate “click”
Lowqastaff-el-e2e-hlppc-api-external-domain-01.sbsscore 18· registrar placeholder
many hyphens “7”very long name “43”TLD with a high abuse rate “sbs”
Lowquantum-systems-research-school.xyzscore 18· boilerplate page
many hyphens “3”very long name “31”TLD with a high abuse rate “xyz”
Lowraphael-booking.comscore 18echoes booking· no DNS
ambiguous brand word “booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
lure words (login, verify, secure…) “claim,recover,recovery”
Lowredlinebooking.comscore 18· active website
form on a brand-styled page “has_form”
Lowrestoran-po-ponyatiyam-lordfilm.hairscore 18· no web server
many hyphens “3”very long name “31”TLD with a high abuse rate “hair”
lure words (login, verify, secure…) “claim,reward,rewards”
Lowrgaccountingservicesllc.artscore 18· robots.txt denied
lure words (login, verify, secure…) “account,service,services”
lure words (login, verify, secure…) “customer,customers,support”

Same data as JSON: /api/zone/risk?day=2026-11-11&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.