dns.pizza

Flagged newborn domains, Thursday, August 27, 2026

15 names at tier medium or above in .vip, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0309-0209-0108-3108-3008-2908-2808-27clear filters
Criticalyukiwatch.vipscore 60· active website
page impersonates a brand “USPS”brand in page title, not in the name “ebay”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.

Highstarlinkai.vipscore 50echoes starlink· no DNS
brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highamazn.vipscore 46echoes amazon· boilerplate page
one-letter brand typo “amazn≈amazon”brand name at a retail registrar “One.com A/S”identical page on many newborns “57 identical pages”

Model opinion: looks like abuse (target: Amazon), confidence 72%. An opinion, not a finding.

Highgooglepro.vipscore 44echoes google
brand in the name “google”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highicloud-ai.vipscore 44echoes icloud· empty page
brand in the name “icloud”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highstockdoge.vipscore 42· active website
page impersonates a brand “Metamask”brand in page title, not in the name “chase”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Mediumglobalmall.vipscore 38· active website
brand in page title, not in the name “rakuten”form on a brand-styled page “has_form”
Mediumpsiphon.vipscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumchazingtime.vipscore 32· active website
page impersonates a brand “USPS”page sells replica goods “Replica Watch”
Mediumchazingtimewatch.vipscore 32· active website
page impersonates a brand “USPS”page sells replica goods “Replica Watch”
Mediumchazingtimewatches.vipscore 32· active website
page impersonates a brand “USPS”page sells replica goods “Replica Watch”
Mediumintimewatch.vipscore 32· active website
page impersonates a brand “USPS”page sells replica goods “Replica Watch”
Mediumlilywatch.vipscore 32· active website
page impersonates a brand “USPS”page sells replica goods “Replica Watch”
Mediumnecoclock.vipscore 32· active website
page impersonates a brand “USPS”page sells replica goods “Replica Watch”
Mediumrepgeekwatch.vipscore 32· active website
page impersonates a brand “USPS”page sells replica goods “Replica Watch”

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.