Flagged newborn domains, Saturday, August 29, 2026

8,722 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumseestipend.comscore 25
nameserver domain born the same day “frednoble.org”
Mediumsend1mpactmedia.comscore 25
nameserver domain born the same day “buffmanly.com”
Mediumsendgrowlancer.comscore 25
nameserver domain born the same day “citylinux.org”
Mediumsendscreenside.comscore 25
nameserver domain born the same day “netion.org”
Mediumsendstipend.comscore 25
nameserver domain born the same day “frednoble.org”
Mediumsignozdevai.comscore 25
nameserver domain born the same day “buffmanly.com”
Mediumsignozdevlab.comscore 25
nameserver domain born the same day “buffmanly.com”
nameserver domain born the same day “citylinux.org”
Mediumstartstipend.comscore 25
nameserver domain born the same day “buffmanly.com”
Mediumstipendbase.comscore 25· redirects elsewhere
nameserver domain born the same day “buffmanly.com”
Mediumstipendcentral.comscore 25· redirects elsewhere
nameserver domain born the same day “buffmanly.com”
Mediumstipendco.comscore 25
nameserver domain born the same day “frednoble.org”
Mediumstipendconnect.comscore 25· redirects elsewhere
nameserver domain born the same day “buffmanly.com”
Mediumstipenddirect.comscore 25
nameserver domain born the same day “buffmanly.com”
Mediumstipendlabs.comscore 25
nameserver domain born the same day “frednoble.org”
Mediumstipendpro.comscore 25
nameserver domain born the same day “frednoble.org”
Mediumstipendteam.comscore 25
nameserver domain born the same day “buffmanly.com”
Mediumtry1mpactmedia.comscore 25
nameserver domain born the same day “frednoble.org”
nameserver domain born the same day “netion.org”
nameserver domain born the same day “roanokeweb.com”
Mediumtrystipend.comscore 25
nameserver domain born the same day “frednoble.org”
Mediumuse1mpactmedia.comscore 25
nameserver domain born the same day “frednoble.org”
nameserver domain born the same day “netion.org”
nameserver domain born the same day “roanokeweb.com”
nameserver domain born the same day “gostaffit.com”
Lowanglerschoiceairbnbs.onlinescore 24echoes airbnb· boilerplate page
brand in the name “airbnb”identical page on many newborns “157 identical pages”
Lowbackupinstagrammail.helpscore 24echoes instagram· boilerplate page
brand in the name “instagram”identical page on many newborns “23 identical pages”
Lowcom-microsoftonline-onedrive.comscore 24echoes microsoft
brand in the name “microsoft”very long name “28”brand name behind Cloudflare “cloudflare.com”
Lowdrillblocksfordumplingsquishy.onlinescore 24· active website
very long name “29”brand in page title, not in the name “roblox”
Loweldenringtarnishededitionguides.bestscore 24· active website
very long name “31”brand in page title, not in the name “nintendo”
lure words (login, verify, secure…) “gov,service,services”many hyphens “3”
Lowfrontierintuition.devscore 24echoes intuit· registrar placeholder
brand in the name “intuit”identical page on many newborns “4484 identical pages”
Lowgeovannysalazarpennalimpiezas.latscore 24· active website
very long name “29”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “login,portal,service,services”many hyphens “3”
Lowrabobank.camscore 24echoes rabobank· no DNS
brand in the name “rabobank”TLD with a high abuse rate “cam”brand name behind Cloudflare “cloudflare.com”
lure words (login, verify, secure…) “official”many hyphens “4”very long name “39”TLD with a high abuse rate “xyz”
Lowrecycledrevolutions.orgscore 24echoes revolut· boilerplate page
brand in the name “revolut”identical page on many newborns “94 identical pages”
Lowsuperiorinsidesalesandsystems.comscore 24· active website
very long name “29”brand in page title, not in the name “wordpress”
Lowthejamesprojecteducationalservices.workscore 24· not probed yet
lure words (login, verify, secure…) “service,services”very long name “34”TLD with a high abuse rate “work”
lure words (login, verify, secure…) “service,services”very long name “30”free DNS provider “dnsowl.com”
Lowvitaura.shopscore 24echoes itau· boilerplate page
brand in the name “itau”identical page on many newborns “1468 identical pages”
punycode name “elniñosplumbingservice scripts=LATIN”lure words (login, verify, secure…) “service”
punycode name “okokbônus scripts=LATIN”lure words (login, verify, secure…) “bonus”
punycode name “soofficialedjź scripts=LATIN”lure words (login, verify, secure…) “official”
Low03001-charles-identity-verif.icuscore 23· no web server
many hyphens “3”very long name “28”random-looking name “H=3.91”TLD with a high abuse rate “icu”
Lowmnfdczha-i-peihei-o-mao-t-com-tw.topscore 23· placeholder page
many hyphens “7”very long name “32”random-looking name “H=3.67”TLD with a high abuse rate “top”
Lowvyzhyvaliti-nasledniki-2sezon-4seria.sbsscore 23· active website
many hyphens “3”very long name “36”random-looking name “H=3.87”TLD with a high abuse rate “sbs”
punycode name “영암맛집 scripts=HANGUL”random-looking name “H=3.77”
Lowxn--12cl4b9bma5e0a6a3iza.comscore 23· active website
punycode name “มังกรเรดิโอ scripts=THAI”random-looking name “H=4.00”
punycode name “小红书体育 scripts=CJK”random-looking name “H=3.95”

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.