Domain Arrivals
You’re viewing the 2026-08-12 issue, not the current issue. Go to the current issue: 2026-08-14

Featured in Domain Arrivals · 2026-08-12

The WordPress File Manager That Shouldn't Be Public

compass.cards ↗ · Suspicious Gentlemen · score 78.0
○Open: public page gives enough substance to understand the site $Paid: pricing, booking, ecommerce, subscription, or paid access is visible ADAds: visible ad load or ad-supported content ✦Pretty: notable design, copy, craft, or presentation ◆Pro: polished, finished-feeling, serious, or operationally mature ◇Niche: specific audience, workflow, or unusually focused use case ◉Human: personal, local, community, civic, handmade, or real-person signal !Suspicious: scammy, spammy, trust theater, finance fog, or credibility concern

An exposed Yanz webshell presents a live file manager and administrative toolkit inside a WordPress installation.

Why it surfaced

This is not a normal content site: the public page identifies itself as a “PRIV8 WEB SHELL,” exposes server and directory details, and offers actions including file uploads, terminal access, domain reading, and mass deletion. Recent file timestamps make it a particularly stark specimen of a compromised or dangerously exposed web property.

Read the complete issue Visit the observed site ↗

Continue into the edition

Ice Does Not Count

August 12’s newborn domains include a rule-bound archive of enormous sodas, 27 family stories cut from one afternoon, a disaster-supply map with a 24-hour freshness rule, and an ocean bell that rings only when six conditions agree.

This is one of 1,000 discoveries in the 2026-08-12 Domain Arrivals issue.

Explore the complete issue Browse Suspicious Gentlemen

More from Suspicious Gentlemen

Three more arrivals

The PayPal Crypto Invoice paypal-check.com

A PayPal-branded page presents a 100 USDT invoice, wallet address, transaction ID, and an urgent payment confirmation flow.

 Snap +Xr Embolex and the €3,000-a-week promise notic.cyou

A Spanish-language, faux-news-style landing page promoting an alleged Portuguese investment platform with guaranteed weekly returns.

 Partnerstalker Wants to Put a Partner’s Entire Phone on One Shared Feed partnerstalker.com

Partnerstalker markets access to a partner’s messages across WhatsApp, iMessage, Instagram, Messenger, and TikTok, with live location tracking.