dns.pizza

Flagged newborn domains, Wednesday, September 2, 2026

26 names at tier low or above in .work, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0309-0209-0108-3108-3008-2908-2808-27clear filters
Highaicloud.workscore 55echoes icloud· parked, for sale
brand in the name “icloud”TLD with a high abuse rate “work”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Chengdu West Dimension Digital Technolog”+2 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highdocu-signers-portal.workscore 55echoes docusign· boilerplate page
brand in the name “docusign”lure words (login, verify, secure…) “portal”TLD with a high abuse rate “work”free DNS provider “dnsowl.com”+3 more

Model opinion: looks like abuse (target: DocuSign), confidence 72%. An opinion, not a finding.

Highgoogleesuit.workscore 55echoes google· robots.txt denied
brand in the name “google”TLD with a high abuse rate “work”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Mediumxtracker.workscore 36· active website
lure words (login, verify, secure…) “track”TLD with a high abuse rate “work”page impersonates a brand “PayPal”
Mediumalsc.workscore 28· server error
TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”
Mediumbigdewagacor.workscore 28· other
TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”
Mediumbigdewaindo.workscore 28· blocked the probe
TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”
Mediumfljh9.workscore 28· blocked the probe
TLD with a high abuse rate “work”brand in page title, not in the name “cloudflare”
Mediumfocushq.workscore 28· blocked the probe
TLD with a high abuse rate “work”brand in page title, not in the name “chatgpt”
Mediumgoldennugget.workscore 28· active website
TLD with a high abuse rate “work”brand in page title, not in the name “booking”
Mediumperson.workscore 28· active website
TLD with a high abuse rate “work”brand in page title, not in the name “chatgpt”
Mediumxn--29ss50a.workscore 26· no DNS
punycode name “宇树 scripts=CJK”TLD with a high abuse rate “work”
Mediumxn--crationsaudreyj-cnb.workscore 26· no web server
punycode name “créationsaudreyj scripts=LATIN”TLD with a high abuse rate “work”
Lowryvca.workscore 22· active website
TLD with a high abuse rate “work”login form “has_form+login words”
Lowadhomeservices.workscore 20· active website
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “work”
Lowno-deposit-bonus-casino.workscore 20· no web server
lure words (login, verify, secure…) “bonus”many hyphens “3”TLD with a high abuse rate “work”
Lowserviceslocal.workscore 20· active website
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “work”
Lowxservices.workscore 20· active website
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “work”
Lowe-signer.workscore 16· redirects elsewhere
TLD with a high abuse rate “work”free DNS provider “dnsowl.com”
Lowqbfincareplus.workscore 16· robots.txt denied
TLD with a high abuse rate “work”free DNS provider “dnsowl.com”
Lowqbfincarepro.workscore 16· robots.txt denied
TLD with a high abuse rate “work”free DNS provider “dnsowl.com”
Lowsmartstartinc.workscore 16· redirect not followed
TLD with a high abuse rate “work”free DNS provider “dnsowl.com”
Lowhowknittingmachines.workscore 14· active website
TLD with a high abuse rate “work”form submits over plain HTTP “http://howknittingmachines.work/”
Lowidemiasecuretransactions.workscore 14· no web server
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “work”
Lowcharlottesvillemobilemechanic.workscore 12· active website
very long name “29”TLD with a high abuse rate “work”
Lowlmdentitycloudpaceworkoffice.workscore 12· no web server
very long name “28”TLD with a high abuse rate “work”

Same data as JSON: /api/zone/risk?day=2026-09-02&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.