dns.pizza

Flagged newborn domains, Sunday, September 6, 2026

13 names at tier high or above in .site, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-0609-0509-0409-0309-0209-0108-3108-3008-2908-28clear filters
Criticalarsenaltiktok.sitescore 62echoes tiktok· active website
brand in the name “tiktok”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highoffice365renewals.sitescore 55echoes office365· boilerplate page
brand in the name “office365”brand plus digits “office365renewals”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”+1 more

Model opinion: looks like abuse (target: Microsoft), confidence 72%. An opinion, not a finding.

Highpay-by-mobile-casinos-uk.sitescore 55echoes tmobile· boilerplate page
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “pay”many hyphens “4”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.

Highrevolut-casino-eire-win.sitescore 55echoes revolut· boilerplate page
brand in the name “revolut”lure words (login, verify, secure…) “win”many hyphens “3”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like abuse (target: Revolut), confidence 85%. An opinion, not a finding.

Highpayval.sitescore 52echoes paypal· registrar placeholder
one-letter brand typo “payval≈paypal”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “4129 identical pages”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highvanguardinves.sitescore 51echoes vanguard· active website
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “vanguard”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highprediksidisney.sitescore 50echoes disney· active website
brand in the name “disney”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Highapp-games-cotco.sitescore 48echoes costco· server error
one-letter brand typo “cotco≈costco”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highgta6xbox.sitescore 46echoes xbox· no web server
brand in the name “xbox”brand plus digits “gta6xbox”brand name at a retail registrar “GoDaddy.com, LLC”
Highbnbstonkscat.sitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”
Highcupcakecat.sitescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”
Highpriimecard.sitescore 42· active website
page impersonates a brand “Amazon Prime”brand in page title, not in the name “amazon”
Highsanahyd.sitescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Same data as JSON: /api/zone/risk?day=2026-09-06&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.