dns.pizza

Flagged newborn domains, Wednesday, September 9, 2026

2,838 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-2710-2610-2510-2410-2310-2210-2110-2010-1910-17
Higha-etsy.comscore 55echoes etsy· parked, for sale
brand in the name “etsy”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”brand name and brand-styled page “etsy”

Model opinion: looks like abuse (target: Etsy), confidence 60%. An opinion, not a finding.

Highaccount-hostinger.comscore 55echoes hostinger
brand in the name “hostinger”lure words (login, verify, secure…) “account”brand name behind Cloudflare “cloudflare.com”
Highaccount-paypal.websitescore 55echoes paypal· blocked the probe
brand in the name “paypal”lure words (login, verify, secure…) “account”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “paypal”+1 more
Highacqbankidw-deveusw1-americanexpress.comscore 55echoes americanexpress
brand in the name “americanexpress”very long name “35”brand plus digits “acqbankidw-deveusw1-americanexpress”brand name behind Cloudflare “cloudflare.com”+2 more
Highadmin-oogle.icuscore 55echoes google· server error
one-letter brand typo “oogle≈google”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more

Model opinion: suspicious, confidence 58%. An opinion, not a finding.

Highadobeinstaller.storescore 55echoes adobe· boilerplate page
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Highaifindsit4u.comscore 55echoes itau· no DNS
brand spelled with digits “aifindsit4u→itau”brand plus digits “aifindsit4u”brand name on a rarely-seen nameserver “tophost.md”brand name at a retail registrar “eNom, LLC”
Highalert-fidelity.comscore 55echoes fidelity
brand in the name “fidelity”lure words (login, verify, secure…) “alert”brand name behind Cloudflare “cloudflare.com”
Highalif-pay.comscore 55echoes alipay
one-letter brand typo “alifpay≈alipay”lure words (login, verify, secure…) “pay”brand name on a rarely-seen nameserver “owlhost.net”
Highamazon-fastgame-winners.comscore 55echoes amazon
brand in the name “amazon”lure words (login, verify, secure…) “winner”brand name behind Cloudflare “cloudflare.com”
Highamazonhiring.orgscore 55echoes amazon· blocked the probe
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Highamericanexpress-memberrewards.comscore 55echoes americanexpress
brand in the name “americanexpress”lure words (login, verify, secure…) “member,reward,rewards”very long name “29”brand name on a rarely-seen nameserver “onlydomains.com”
Highbblwu5a4.topscore 55echoes usaa· robots.txt denied
brand spelled with digits “bblwu5a4→usaa”brand plus digits “bblwu5a4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highbetterbyphone-cloud.globalscore 55echoes icloud· registrar placeholder
one-letter brand typo “cloud≈icloud”form on a brand-styled page “has_form”identical page on many newborns “1669 identical pages”

Model opinion: looks benign, confidence 94%. An opinion, not a finding.

Highbetterbyphone-cloud.storescore 55echoes icloud· registrar placeholder
one-letter brand typo “cloud≈icloud”form on a brand-styled page “has_form”identical page on many newborns “1669 identical pages”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highbinance-help.infoscore 55echoes binance· blocked the probe
brand in the name “binance”lure words (login, verify, secure…) “help”brand name behind Cloudflare “cloudflare.com”
Highbooking-auth.infoscore 55echoes booking· blocked the probe
brand in the name “booking”lure words (login, verify, secure…) “auth”brand name behind Cloudflare “cloudflare.com”
Highbooking-confirmation0909aapp.comscore 55echoes booking
brand in the name “booking”lure words (login, verify, secure…) “confirm,confirmation”very long name “28”brand plus digits “booking-confirmation0909aapp”+1 more
Highbooking-payments-12384832.homesscore 55echoes booking· empty page
brand in the name “booking”lure words (login, verify, secure…) “payment,payments”brand plus digits “booking-payments-12384832”TLD with a high abuse rate “homes”+2 more

Model opinion: looks like abuse (target: Booking.com), confidence 75%. An opinion, not a finding.

Highbooking-reservation-confirm.comscore 55echoes booking
brand in the name “booking”lure words (login, verify, secure…) “confirm”brand name behind Cloudflare “cloudflare.com”
Highbybitfinance.cfdscore 55echoes bybit· no DNS
brand in the name “bybit”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highbybitfinance.clickscore 55echoes bybit· empty page
brand in the name “bybit”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks like abuse (target: Bybit), confidence 72%. An opinion, not a finding.

Highbybitfinance.cyouscore 55echoes bybit· no DNS
brand in the name “bybit”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highbybitfinance.lolscore 55echoes bybit· no DNS
brand in the name “bybit”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highbybitfinance.sbsscore 55echoes bybit· empty page
brand in the name “bybit”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks like abuse (target: Bybit), confidence 68%. An opinion, not a finding.

Highcharles-schwabservices.comscore 55echoes schwab
brand in the name “schwab”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highchatgptadtracker.comscore 55echoes chatgpt
brand in the name “chatgpt”lure words (login, verify, secure…) “track”
Highcibcbusinessportal.comscore 55echoes cibc
brand in the name “cibc”lure words (login, verify, secure…) “portal”
Highcibcorealtycorp.netscore 55echoes cibc· boilerplate page
brand in the name “cibc”brand name at a retail registrar “DropCatch.com 1334 LLC”identical page on many newborns “172 identical pages”brand name redirects elsewhere “dropcatch.com”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highcl-low-cost-cloud-management-4e.topscore 55echoes icloud· boilerplate page
one-letter brand typo “cloud≈icloud”many hyphens “5”very long name “31”brand plus digits “cl-low-cost-cloud-management-4e”+2 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highcloud-mossexperts.clickscore 55echoes icloud· robots.txt denied
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Highcloud-sys92.sbsscore 55echoes icloud· no web server
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-sys92”TLD with a high abuse rate “sbs”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Highcoin-baseservices.comscore 55echoes coinbase
brand in the name “coinbase”lure words (login, verify, secure…) “service,services”
Highcom-accountcenter-gmail.icuscore 55echoes gmail· blocked the probe
brand in the name “gmail”lure words (login, verify, secure…) “account”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more
Highcostcorebate-executivemembers2026.comscore 55echoes costco
brand in the name “costco”lure words (login, verify, secure…) “member,members”very long name “33”brand plus digits “costcorebate-executivemembers2026”
Highcustomers-coinbase.comscore 55echoes coinbase
brand in the name “coinbase”lure words (login, verify, secure…) “customer,customers”brand name behind Cloudflare “cloudflare.com”
Highcyberoutlook.questscore 55echoes outlook· no DNS
brand in the name “outlook”TLD with a high abuse rate “quest”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Highdeliveryfedex.proscore 55echoes fedex· robots.txt denied
brand in the name “fedex”lure words (login, verify, secure…) “delivery”
Highdisney-plus.momscore 55echoes disney· empty page
brand in the name “disney”TLD with a high abuse rate “mom”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks like abuse (target: Disney), confidence 75%. An opinion, not a finding.

Highdocusignni.icuscore 55echoes docusign· empty page
brand in the name “docusign”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more

Model opinion: looks like abuse (target: DocuSign), confidence 78%. An opinion, not a finding.

Highemvicloud.sbsscore 55echoes icloud· blocked the probe
brand in the name “icloud”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Higheng-trezorsuite.orgscore 55echoes trezor· blocked the probe
brand in the name “trezor”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highfacebook-verify-fanpage.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “verify”
Highfinance-ai-transformation.globalscore 55echoes binance· registrar placeholder
one-letter brand typo “finance≈binance”form on a brand-styled page “has_form”identical page on many newborns “1669 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfinance-ai-transformation.orgscore 55echoes binance· registrar placeholder
one-letter brand typo “finance≈binance”form on a brand-styled page “has_form”identical page on many newborns “1669 identical pages”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highfinance-ai-transformation.storescore 55echoes binance· registrar placeholder
one-letter brand typo “finance≈binance”form on a brand-styled page “has_form”identical page on many newborns “1669 identical pages”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highfinance-secure-office.sitescore 55echoes binance· no DNS
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”
Highfs-personal-finance-management-ku.topscore 55echoes binance· boilerplate page
one-letter brand typo “finance≈binance”many hyphens “4”very long name “33”TLD with a high abuse rate “top”+1 more

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highgoogle-fy.topscore 55echoes google· boilerplate page
brand in the name “google”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”identical page on many newborns “123 identical pages”

Model opinion: looks like abuse (target: Google), confidence 66%. An opinion, not a finding.

Highgoogle-recovery.topscore 55echoes google· robots.txt denied
brand in the name “google”lure words (login, verify, secure…) “recover,recovery”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-09-09&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.