dns.pizza

Flagged newborn domains, Tuesday, September 1, 2026

15 names at tier high or above in .shop, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0609-0509-0409-0309-0209-0108-3108-3008-2908-28clear filters
Criticalajsmmpanel.shopscore 68· active website
page asks for credentials “log in to your account”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Criticalgarde-maiade.shopscore 60· active website
page impersonates a brand “FedEx”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: Garde-Malade (garde-malade-dr.it.com)), confidence 79%. An opinion, not a finding.

Criticalpostagestamps.shopscore 60· active website
page impersonates a brand “USPS”brand in page title, not in the name “usps”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: USPS), confidence 78%. An opinion, not a finding.

Highvlonethugmail.shopscore 54echoes gmail· registrar placeholder
brand in the name “gmail”brand name at a retail registrar “Namecheap, Inc.”brand name at a watch-list registrar “Namecheap, Inc.”identical page on many newborns “4339 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highmaglitaus.shopscore 52echoes itau· active website
brand in the name “itau”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more

Model opinion: looks like phishing (target: Maglite), confidence 79%. An opinion, not a finding.

Highnetflix-and-chills.shopscore 52echoes netflix· robots.txt denied
brand in the name “netflix”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo”brand name at a watch-list registrar “NameSilo”
Hightesttiktokksl.shopscore 52echoes tiktok· active website
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc.”brand name at a watch-list registrar “Dynadot Inc.”+1 more

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highoperacaotiktok.shopscore 51echoes tiktok· active website
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Highaccessline.shopscore 48· active website
lure words (login, verify, secure…) “access”page impersonates a brand “Office 365”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.

Highallpay-cachi.shopscore 46echoes alipay· active website
one-letter brand typo “allpay≈alipay”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highauspost-new-order001.shopscore 46echoes auspost· no web server
brand in the name “auspost”brand plus digits “auspost-new-order001”brand name at a retail registrar “Web Commerce Communication Ltd.”
Highgetvagusnerve.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highmyvagusnerve.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highspotfarm.shopscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “spotify”
Hightryvagusnerve.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Same data as JSON: /api/zone/risk?day=2026-09-01&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.