dns.pizza

Flagged newborn domains, Friday, August 28, 2026

23 names at tier low or above in .digital, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0309-0209-0108-3108-3008-2908-2808-27clear filters
Hightaxagent-digital-creds-access.digitalscore 58· active website
lure words (login, verify, secure…) “access”many hyphens “3”very long name “29”page impersonates a brand “HMRC”+1 more

Model opinion: suspicious (target: HMRC), confidence 62%. An opinion, not a finding.

Highstarlinkenlinea.digitalscore 44echoes starlink· placeholder page
brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “10dencehispahard SLU”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumkumov.digitalscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumvexil.digitalscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumenchufe.digitalscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “96 identical pages”
Mediumfernlabs.digitalscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “96 identical pages”
Mediumpromessas.digitalscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “96 identical pages”
Mediumwalletcard.digitalscore 28· active website
lure words (login, verify, secure…) “wallet”page impersonates a brand “MetaMask”
Mediuminbound-system-portal.digitalscore 26· blocked the probe
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
Lowatendimentoespecializado.digitalscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowau888vn.digitalscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowdepartamentonetempresa.digitalscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowgrobiz.digitalscore 20· active website
brand in page title, not in the name “namecheap”
Lowneuroloop.digitalscore 20· active website
brand in page title, not in the name “tiktok”
Lowpremioaovivo.digitalscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowsolucoesintegradas.digitalscore 20· blocked the probe
brand in page title, not in the name “cloudflare”
Lowtokyobola.digitalscore 20· redirects elsewhere
brand in page title, not in the name “google”
Lowzyntax.digitalscore 20· active website
brand in page title, not in the name “google”
Lowstarfieldcrm.digitalscore 14· active website
login form “has_form+login words”
Lowtkcakpkau.digitalscore 14· active website
login form “has_form+login words”
Lowasfcustomers1.digitalscore 12· no DNS
lure words (login, verify, secure…) “customer,customers”
Lowcloudservices-info.digitalscore 12· redirects elsewhere
lure words (login, verify, secure…) “service,services”
Lowmember-accessreport.digitalscore 12· blocked the probe
lure words (login, verify, secure…) “access,member”

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.