Flagged newborn domains, Tuesday, September 1, 2026

27 names at tier low or above in .digital, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highshopee-games.digitalscore 50echoes shopee· server error
brand in the nameshopeebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: suspicious (target: Shopee), confidence 60%. An opinion, not a finding.

Hightaplypay.digitalscore 42· active website
page impersonates a brandNetflixbrand in page title, not in the nameapple
Hightrebor.digitalscore 42echoes trezor· active website
one-letter brand typotrebor≈trezorbrand name at a retail registrarHOSTINGER operations, UABbrand name at a watch-list registrarHOSTINGER operations, UAB
Mediumiugu-as.digitalscore 38· blocked the probe
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumprojectcontrol.digitalscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumthemonkey.digitalscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumamazin.digitalscore 36echoes amazon· no DNS
one-letter brand typoamazin≈amazonbrand name at a retail registrarUltahost, Inc
Mediumappbonus.digitalscore 26· blocked the probe
lure words (login, verify, secure…)bonusbrand in page title, not in the namecloudflare
Mediumbonusdepontos.digitalscore 26· blocked the probe
lure words (login, verify, secure…)bonusbrand in page title, not in the namecloudflare
Mediumbonusresgate.digitalscore 26· blocked the probe
lure words (login, verify, secure…)bonusbrand in page title, not in the namecloudflare
Lowappresgate.digitalscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowbluazur.digitalscore 20· active website
brand in page title, not in the namenamecheap
Lowconsultar-tarifa-pedagio.digitalscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowescalable.digitalscore 20· active website
brand in page title, not in the namewhatsapp
Lowfamilyvault.digitalscore 20· active website
brand in page title, not in the nameicloud
Lowgojolta.digitalscore 20· active website
brand in page title, not in the namenamecheap
Loworcaai.digitalscore 20· active website
brand in page title, not in the namewhatsapp
Lowreceive35285.digitalscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowresgatarpontos.digitalscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowsonos.digitalscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowtulogo.digitalscore 20· active website
brand in page title, not in the namewordpress
Lowvantz.digitalscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowgvvalue.digitalscore 14· active website
login formhas_form+login words
Lowmedishop.digitalscore 14· active website
login formhas_form+login words
Lowpayment-update.digitalscore 12· active website
lure words (login, verify, secure…)payment,update
Lowpaymentsmatter.digitalscore 12· suspended
lure words (login, verify, secure…)payment,payments
Lowpinup-bonus-official.digitalscore 12· empty page
lure words (login, verify, secure…)bonus,official

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.