Flagged newborn domains, Friday, August 28, 2026

9 names at tier medium or above in .digital, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Hightaxagent-digital-creds-access.digitalscore 58· active website
lure words (login, verify, secure…)accessmany hyphens3very long name29page impersonates a brandHMRC+1 more

Model opinion: suspicious (target: HMRC), confidence 62%. An opinion, not a finding.

Highstarlinkenlinea.digitalscore 44echoes starlink· placeholder page
brand in the namestarlinkbrand name behind Cloudflarecloudflare.combrand name at a retail registrar10dencehispahard SLU

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumkumov.digitalscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumvexil.digitalscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumenchufe.digitalscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumfernlabs.digitalscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumpromessas.digitalscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumwalletcard.digitalscore 28· active website
lure words (login, verify, secure…)walletpage impersonates a brandMetaMask
Mediuminbound-system-portal.digitalscore 26· blocked the probe
lure words (login, verify, secure…)portalbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.