Is there anything else? The domain's age, traffic estimates, any services it hosts like ad networks, or if it's associated with known bad actors. If the domain is recently registered, that's another red flag.