dns.pizza

Flagged newborn domains, Saturday, August 29, 2026

2,225 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0209-0108-3108-3008-2908-2808-27
Highbalance-coinbase.comscore 50echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highbaselinerh.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highbestbuymix.comscore 50echoes bestbuy
brand in the name “bestbuy”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highbestsmmsite.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “facebook”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highbetasustwitter-87en.icuscore 50echoes twitter· no DNS
brand in the name “twitter”brand plus digits “betasustwitter-87en”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+2 more
Highbinace.topscore 50echoes binance· active website
one-letter brand typo “binace≈binance”TLD with a high abuse rate “top”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks like abuse (target: Binance), confidence 72%. An opinion, not a finding.

Highbinance-special-offer.comscore 50echoes binance
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highchandigarhcabservices.sitescore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “booking”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highclark-coinbase.comscore 50echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highclefadobe.orgscore 50echoes adobe· empty page
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Model opinion: looks like abuse (target: Adobe), confidence 78%. An opinion, not a finding.

Highcloud-beaconbase.clickscore 50echoes icloud· active website
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highcloud-beaconhub.clickscore 50echoes icloud· active website
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highcloud-cascadebase.clickscore 50echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
Highcloud-crestbase.clickscore 50echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
Highcloud-datenschutz24.sitescore 50echoes icloud· server error
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-datenschutz24”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcloud-datenschutz365.sitescore 50echoes icloud· server error
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-datenschutz365”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highcloud-gridbase.clickscore 50echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
Highcloud-lock.sbsscore 50echoes icloud· no web server
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “sbs”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highcloud-matrixhub.clickscore 50echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
Highcloud-panelbase.clickscore 50echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
Highcloud-pivotbase.clickscore 50echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
Highcloud-sicherheit24.sitescore 50echoes icloud· server error
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-sicherheit24”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highcloud-vertexhub.clickscore 50echoes icloud· active website
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highcloudflares.infoscore 50echoes cloudflare· no DNS
brand in the name “cloudflare”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highcombank-online.sbsscore 50echoes commbank· no web server
one-letter brand typo “combank≈commbank”TLD with a high abuse rate “sbs”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Highcomcst.topscore 50echoes comcast· no DNS
one-letter brand typo “comcst≈comcast”TLD with a high abuse rate “top”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highcostcoslots.comscore 50echoes costco
brand in the name “costco”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highdocusignsendgridivocationalsharedoc.icuscore 50echoes docusign· no web server
brand in the name “docusign”very long name “35”TLD with a high abuse rate “icu”brand name at a retail registrar “Cloud DNS Ltd”
Highdune-gazelle.comscore 50echoes zelle· placeholder page
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: Zelle), confidence 65%. An opinion, not a finding.

Highelitecleaningservicesny.comscore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “airbnb”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highelitevault.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highetsyles.comscore 50echoes etsy· empty page
brand in the name “etsy”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highetsylesvip.comscore 50echoes etsy
brand in the name “etsy”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highfacebookac.vipscore 50echoes facebook· no DNS
brand in the name “facebook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highfacebookadc.vipscore 50echoes facebook· no DNS
brand in the name “facebook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Highfacehook.clickscore 50echoes facebook· active website
one-letter brand typo “facehook≈facebook”TLD with a high abuse rate “click”brand name on a rarely-seen nameserver “bmdns.net”brand name at a retail registrar “Name.com, Inc.”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highglen-gazelle.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highgooglemeet.proscore 50echoes google· no DNS
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highgooglesitereviewqyym6bmkjngooxerskzzfw4hsevagxl6bnjbrbgmf0.blogscore 50echoes google· robots.txt denied
brand in the name “google”very long name “58”brand plus digits “googlesitereviewqyym6bmkjngooxerskzzfw4h”brand name at a retail registrar “Automattic Inc.”
Highgooglesitereviewqyym6bmkjngooxerskzzfw4hsevagxl6bnjbrbgmf0.shopscore 50echoes google· robots.txt denied
brand in the name “google”very long name “58”brand plus digits “googlesitereviewqyym6bmkjngooxerskzzfw4h”brand name at a retail registrar “Automattic, Inc. ”
Highicloud-lnc.centerscore 50echoes icloud· empty page
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Model opinion: suspicious (target: Apple iCloud), confidence 60%. An opinion, not a finding.

Highicloudphoto.centerscore 50echoes icloud· empty page
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: Apple), confidence 65%. An opinion, not a finding.

Highjeremy-coinbase.comscore 50echoes coinbase
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highjmc-ims.infoscore 50· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”form submits over plain HTTP “http://jmc-ims.info/login”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highjob-for-google.comscore 50echoes google
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highkingroyal-hizligiris-adresleri.icuscore 50· blocked the probe
very long name “30”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highlaunchgrovedao.funscore 50· active website
TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highlondoncitycabservices.comscore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highloyolagridironvanguard.comscore 50echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highmailchimp-passkey.comscore 50echoes mailchimp
brand in the name “mailchimp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.