dns.pizza

Flagged newborn domains, Saturday, August 29, 2026

36 names at tier low or above in .tech, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0309-0209-0108-3108-3008-2908-2808-27clear filters
Criticalsecureicloud.techscore 100echoes icloud· active website
brand in the name “icloud”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”+3 more

Model opinion: looks like phishing (target: Apple), confidence 95%. An opinion, not a finding.

Criticaltelegramdirectory.techscore 71echoes telegram· active website
brand in the name “telegram”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highopenaiagent.techscore 44echoes openai· empty page
brand in the name “openai”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Mediumbluum.techscore 38· active website
brand in page title, not in the name “shopify”form on a brand-styled page “has_form”
Mediumdeskpiloterp.techscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumzellesite.techscore 38echoes zelle· boilerplate page
brand in the name “zelle”brand name at a retail registrar “IONOS SE”
Mediumcompliancedirect.techscore 30· active website
page asks for credentials “verify your identity”
Mediumrectorsoft.techscore 30· active website
page asks for credentials “LOG IN TO YOUR ACCOUNT”
Mediumtrackapply.techscore 26· active website
lure words (login, verify, secure…) “track”brand in page title, not in the name “linkedin”
Lowexamia.techscore 22· active website
page impersonates a brand “PayPal”
Lowbuildyourmacapp.techscore 20· active website
brand in page title, not in the name “apple”
Lowelexio.techscore 20· active website
brand in page title, not in the name “google”
Lowfuzyon.techscore 20· empty page
brand in page title, not in the name “whatsapp”
Lowhavenme.techscore 20· empty page
brand in page title, not in the name “whatsapp”
Lowkizly.techscore 20· active website
brand in page title, not in the name “etsy”
Lowkodyoliveloop.techscore 20· server error
brand in page title, not in the name “cloudflare”
Lowleafmenu.techscore 20· active website
brand in page title, not in the name “whatsapp”
Loworthopyro.techscore 20· active website
brand in page title, not in the name “nvidia”
Lowpromptography.techscore 20· redirects elsewhere
brand in page title, not in the name “fidelity”
Lowsecretinapp.techscore 20· active website
brand in page title, not in the name “whatsapp”
Lowsupercodeai.techscore 20· active website
brand in page title, not in the name “slack”
Lowtappycard.techscore 20· active website
brand in page title, not in the name “booking”
Lowwikilift.techscore 20· server error
brand in page title, not in the name “cloudflare”
Lowxn--80aalewjl.techscore 18· robots.txt denied
punycode name “кандела scripts=CYRILLIC”
Lowxn--80afadg4advce7a.techscore 18· robots.txt denied
punycode name “голдгеоскан scripts=CYRILLIC”
Lowxn--c1aapkosapc.techscore 18· boilerplate page
punycode name “госуслуги scripts=CYRILLIC”
Lowxn--prtor-tra.techscore 18· empty page
punycode name “prætor scripts=LATIN”
Low303maxwinhoki.techscore 14· active website
login form “has_form+login words”
Lownidcard.techscore 14· active website
login form “has_form+login words”
Lowsakshimeena.techscore 14· blocked the probe
login form “has_form+login words”
Lowaquirecustomers.techscore 12· registrar placeholder
lure words (login, verify, secure…) “customer,customers”
Lowtechhavencustomers.techscore 12· registrar placeholder
lure words (login, verify, secure…) “customer,customers”
Lowonline-casino-bez-overeni-identity.techscore 10· no DNS
many hyphens “4”very long name “34”
Lowspot-the-gap-iibauk-baconf26.techscore 10· empty page
many hyphens “4”very long name “28”
Lowta-kalytera-xena-online-casino.techscore 10· no DNS
many hyphens “4”very long name “30”
Lowta-kalytera-xena-online-casinos.techscore 10· no DNS
many hyphens “4”very long name “31”

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.