Flagged newborn domains, Monday, August 31, 2026

16 names at tier low or above in .world, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumplums.worldscore 38· active website
brand in page title, not in the namerobinhoodform on a brand-styled pagehas_form
Mediumshipify.worldscore 36echoes shopify· no web server
one-letter brand typoshipify≈shopifybrand name at a retail registrarCommuniGal Communication Ltd.
Mediumxn--89q08b034avc032d2obz7eo04i.worldscore 27· redirects elsewhere
punycode name点击领取新澳特料 scripts=CJKvery long name30random-looking nameH=4.09
Low3captcha.worldscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowcatchon-tv.worldscore 20· active website
brand in page title, not in the namewhatsapp
Lowcopperape.worldscore 20· active website
brand in page title, not in the namerobinhood
Lowspendlio.worldscore 20· server error
brand in page title, not in the namecloudflare
Lowxn--0lqq5f91y9rf.worldscore 18· not probed yet
punycode name每日分享 scripts=CJK
Lowxn--72c5a8att3k.worldscore 18· active website
punycode nameแทงหวย scripts=THAI
Lowxn--82cz3bcub1a.worldscore 18· active website
punycode nameตรวจหวย scripts=THAI
Lowxn--solototo--jn7tl25i.worldscore 18· no DNS
punycode namesolototo-正確 scripts=CJK/LATIN
Lowxn--y20az34d.worldscore 18· empty page
punycode name胖龙 scripts=CJK
Lowlifestack.worldscore 14· active website
login formhas_form+login words
Lowwebtracking.worldscore 12· no DNS
lure words (login, verify, secure…)track,tracking
many hyphens3very long name49
Lowwww-booking.worldscore 10echoes booking· robots.txt denied
ambiguous brand wordbookingbrand name behind Cloudflarecloudflare.com

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.