domain.newly_registered
The domain was registered fewer than 30 days ago.
Also emitted by /v1/links (check link.destination_reputation, evaluated against the redirect chain’s final destination).
What it looks at#
The same RDAP lookup as domain.not_registered. When
a registration date is available and the domain is less than 30 days old, this fires. The
threshold (30 days) is shared code between /domains and /links so both gates agree on
exactly the same cutoff for the same domain.
Why it matters#
Domain age alone proves nothing — plenty of legitimate businesses launch a brand-new domain. But phishing and scam infrastructure is disproportionately registered right before a campaign starts and abandoned soon after, so age correlates strongly with short-lived abuse even though it doesn’t prove it.
What to do#
Medium severity — treat as worth a second look, not an automatic block. A three-day-old domain behind a signup or a shared link deserves scrutiny in combination with other signals, not rejection on its own.