dns.pizza

Flagged newborn domains, Monday, August 31, 2026

12 names at tier high or above in .shop, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0609-0509-0409-0309-0209-0108-3108-3008-2908-28clear filters
Criticalntflix.shopscore 88echoes netflix· active website
one-letter brand typo “ntflix≈netflix”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: Netflix), confidence 82%. An opinion, not a finding.

Criticalworldwidesmmpanel.shopscore 68· active website
page asks for credentials “log in to your account”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalusaallbirds.shopscore 62echoes usaa· active website
brand in the name “usaa”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Allbirds), confidence 92%. An opinion, not a finding.

Criticalrinkon.shopscore 60· active website
page impersonates a brand “NETFLIX”brand in page title, not in the name “xbox”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highlive-micr0soft.shopscore 55echoes microsoft· no web server
brand spelled with digits “live-micr0soft→microsoft”brand plus digits “live-micr0soft”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highrooblox.shopscore 55echoes roblox· empty page
one-letter brand typo “rooblox≈roblox”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”brand in page title, not in the name “roblox”

Model opinion: looks like abuse (target: Roblox), confidence 70%. An opinion, not a finding.

Highalaicloud.shopscore 44echoes icloud· no DNS
brand in the name “icloud”brand name at a retail registrar “Dynadot Inc.”brand name at a watch-list registrar “Dynadot Inc.”
Highrapidapicloud.shopscore 44echoes icloud· registrar placeholder
brand in the name “icloud”brand name at a retail registrar “Namecheap, Inc.”brand name at a watch-list registrar “Namecheap, Inc.”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highrobloxmod.shopscore 44echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “Namecheap, Inc.”brand name at a watch-list registrar “Namecheap, Inc.”

Model opinion: looks like abuse (target: Roblox), confidence 88%. An opinion, not a finding.

Hightiktok-seller.shopscore 44echoes tiktok· no DNS
brand in the name “tiktok”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highrevolutiondiabdelati.shopscore 40echoes revolut· boilerplate page
brand in the name “revolut”identical page on many newborns “50 identical pages”

Model opinion: unreachable when judged, confidence 83%. An opinion, not a finding.

Highstarsstripessawdust.shopscore 40echoes stripe· placeholder page
brand in the name “stripe”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.