Flagged newborn domains, Tuesday, September 1, 2026

12,278 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Mediumbteiynhh.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumdeurrec.comscore 25
nameserver domain born the same day “iwegleadns.com”
Mediumebtussfda.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumeenrdxt.comscore 25
nameserver domain born the same day “iwegleadns.com”
Mediumehednmdo.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumekeoasat.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumelhrilt.comscore 25
nameserver domain born the same day “iwegleadns.com”
Mediumendarzefe.comscore 25
nameserver domain born the same day “iwegleadns.com”
Mediumfeihcwin.comscore 25· no DNS
nameserver domain born the same day “iwegleadns.com”
Mediumfftfynce.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumfudthfeet.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumgdeeshtrir.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumheldcetv.comscore 25· no DNS
nameserver domain born the same day “iwegleadns.com”
Mediumhtflhgent.comscore 25
nameserver domain born the same day “iwegleadns.com”
Mediumiieaxfcyoo.comscore 25
nameserver domain born the same day “iwegleadns.com”
Mediumivrendfl.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumncyhhefw.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumoowuieget.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumovvrehh.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumravseefn.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumrcsfoyfe.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumrregxyahd.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumrrgatfseff.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumsdlhieert.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumsixouttta.comscore 25
nameserver domain born the same day “iwegleadns.com”
Mediumtdcdgwvhl.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumtfneesdu.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumthosifla.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumtiibdsiteb.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumttddondae.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumtxnddhwtay.comscore 25
nameserver domain born the same day “naniimdns.com”
Mediumtyiuywlwp.comscore 25
nameserver domain born the same day “iwegleadns.com”
Mediumvgsfneih.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumvrxcdoerg.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumwenerte.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumwiftxgua.comscore 25
nameserver domain born the same day “deederdns.com”
Mediumydtafcf.comscore 25
nameserver domain born the same day “toetpudns.com”
Mediumyvdffdi.comscore 25
nameserver domain born the same day “naniimdns.com”
Lowamericaimmigrationdefensegroup.infoscore 24· active website
very long name “30”brand in page title, not in the name “nationwide”
Lowcasadecarnessaopauloanapolis.blogscore 24· active website
very long name “28”brand in page title, not in the name “whatsapp”
lure words (login, verify, secure…) “security”many hyphens “6”very long name “48”TLD with a high abuse rate “top”
Lowdownloadadobeacrob.comscore 24echoes adobe· registrar placeholder
brand in the name “adobe”identical page on many newborns “697 identical pages”
Lowfx-home-security-systems-installation.topscore 24· not probed yet
lure words (login, verify, secure…) “security”many hyphens “4”very long name “37”TLD with a high abuse rate “top”
Lowheartlandinterpretationservices.xyzscore 24· not probed yet
lure words (login, verify, secure…) “service,services”very long name “31”TLD with a high abuse rate “xyz”
Lowjz-antivirus-internet-security.topscore 24· not probed yet
lure words (login, verify, secure…) “security”many hyphens “3”very long name “30”TLD with a high abuse rate “top”
lure words (login, verify, secure…) “auth,login,portal”many hyphens “3”
Lowmrfixitxgrokipediamediauniversity.livescore 24· redirects elsewhere
very long name “33”brand in page title, not in the name “starlink”
Lowmrfixitxgrokipediamediauniversity.onlinescore 24· redirects elsewhere
very long name “33”brand in page title, not in the name “starlink”
Lowmrfixitxgrokipediamediauniversity.storescore 24· redirects elsewhere
very long name “33”brand in page title, not in the name “starlink”
Lowmsfixitxgrokipediamediauniversity.livescore 24· redirects elsewhere
very long name “33”brand in page title, not in the name “starlink”

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.