dns.pizza

Flagged newborn domains, Saturday, August 29, 2026

9 names at tier medium or above in .tech, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0309-0209-0108-3108-3008-2908-2808-27clear filters
Criticalsecureicloud.techscore 100echoes icloud· active website
brand in the name “icloud”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”+3 more

Model opinion: looks like phishing (target: Apple), confidence 95%. An opinion, not a finding.

Criticaltelegramdirectory.techscore 71echoes telegram· active website
brand in the name “telegram”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highopenaiagent.techscore 44echoes openai· empty page
brand in the name “openai”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Mediumbluum.techscore 38· active website
brand in page title, not in the name “shopify”form on a brand-styled page “has_form”
Mediumdeskpiloterp.techscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumzellesite.techscore 38echoes zelle· boilerplate page
brand in the name “zelle”brand name at a retail registrar “IONOS SE”
Mediumcompliancedirect.techscore 30· active website
page asks for credentials “verify your identity”
Mediumrectorsoft.techscore 30· active website
page asks for credentials “LOG IN TO YOUR ACCOUNT”
Mediumtrackapply.techscore 26· active website
lure words (login, verify, secure…) “track”brand in page title, not in the name “linkedin”

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.