dns.pizza

Flagged newborn domains, Saturday, September 19, 2026

938 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-1909-1809-1709-1609-1509-1409-1309-1209-1109-10
Highetsyservice.bizscore 55echoes etsy· not probed yet
brand in the name “etsy”lure words (login, verify, secure…) “service”brand name behind Cloudflare “cloudflare.com”
Highfacebook-caseverify.comscore 55echoes facebook
brand in the name “facebook”lure words (login, verify, secure…) “verify”brand name behind Cloudflare “cloudflare.com”
Highfind-my-icloud.proscore 55echoes icloud· redirects elsewhere
brand in the name “icloud”free DNS provider “dnsowl.com”brand in page title, not in the name “apple”

Model opinion: looks like abuse (target: Apple), confidence 66%. An opinion, not a finding.

Highgearservicevanguard.comscore 55echoes vanguard
brand in the name “vanguard”lure words (login, verify, secure…) “service”brand name behind Cloudflare “cloudflare.com”
Highgoogle-site-verificationqzwqhx9fhmusynmcjohoorjmokrntfwmpmo.onlinescore 55echoes google· not probed yet
brand in the name “google”lure words (login, verify, secure…) “verification”very long name “59”brand plus digits “google-site-verificationqzwqhx9fhmusynmc”
Highgoogledocssdf.topscore 55echoes google· redirects elsewhere
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”+1 more

Model opinion: looks like abuse (target: Google), confidence 72%. An opinion, not a finding.

Highgoogleseoproject.xyzscore 55echoes google· not probed yet
brand in the name “google”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highgotrustwallet.comscore 55echoes trustwallet· no DNS
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”
Highguestverify44122-booking.comscore 55echoes booking
brand in the name “booking”lure words (login, verify, secure…) “verify”brand plus digits “guestverify44122-booking”
Highhelp-support-cloud.infoscore 55echoes icloud· not probed yet
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “help,support”brand name behind Cloudflare “cloudflare.com”
Highhouseofinstagram.livescore 55echoes instagram· redirects elsewhere
brand in the name “instagram”form on a brand-styled page “has_form”brand name redirects elsewhere “suivicolis.org”

Model opinion: looks like a scam, confidence 78%. An opinion, not a finding.

Highicloud-finmi.camscore 55echoes icloud· not probed yet
brand in the name “icloud”TLD with a high abuse rate “cam”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highidcloud-us.cyouscore 55echoes icloud· not probed yet
one-letter brand typo “idcloud≈icloud”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highifacebook.newsscore 55echoes facebook· boilerplate page
brand in the name “facebook”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Facebook), confidence 60%. An opinion, not a finding.

Highintuit-support.emailscore 55echoes intuit· redirects elsewhere
brand in the name “intuit”lure words (login, verify, secure…) “support”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”brand name and brand-styled page “intuit”

Model opinion: looks like abuse (target: Intuit), confidence 72%. An opinion, not a finding.

Highintuit-support.sitescore 55echoes intuit· redirects elsewhere
brand in the name “intuit”lure words (login, verify, secure…) “support”brand name and brand-styled page “intuit”

Model opinion: looks like abuse (target: Intuit), confidence 72%. An opinion, not a finding.

Highintuitaisystems.xyzscore 55echoes intuit· boilerplate page
brand in the name “intuit”TLD with a high abuse rate “xyz”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”identical page on many newborns “128 identical pages”

Model opinion: suspicious, confidence 45%. An opinion, not a finding.

Highintuitpluginapp.comscore 55echoes intuit· redirects elsewhere
brand in the name “intuit”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”brand name and brand-styled page “intuit”

Model opinion: suspicious (target: Intuit), confidence 62%. An opinion, not a finding.

Highintuitpluginupdates.comscore 55echoes intuit
brand in the name “intuit”lure words (login, verify, secure…) “update”
Highinvoiceapplinkedin.comscore 55echoes linkedin
brand in the name “linkedin”lure words (login, verify, secure…) “invoice”brand name behind Cloudflare “cloudflare.com”
Highinvoicereceiptlinkedin.comscore 55echoes linkedin
brand in the name “linkedin”lure words (login, verify, secure…) “invoice”brand name behind Cloudflare “cloudflare.com”
Highionosserversdata.topscore 55echoes ionos· not probed yet
brand in the name “ionos”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
Highking-binance.xyzscore 55echoes binance· placeholder page
brand in the name “binance”TLD with a high abuse rate “xyz”brand name at a retail registrar “NicNames, Inc.”brand name and brand-styled page “binance”

Model opinion: looks like abuse (target: Binance), confidence 72%. An opinion, not a finding.

Highkraken-ssylka.infoscore 55echoes kraken· blocked the probe
ambiguous brand word “kraken”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+2 more
Highkraken-to.infoscore 55echoes kraken· blocked the probe
ambiguous brand word “kraken”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+2 more
Highkraken-zerkalo-cc.infoscore 55echoes kraken· blocked the probe
ambiguous brand word “kraken”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+2 more
Highkyletrustwallet.comscore 55echoes trustwallet
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”free DNS provider “dnsowl.com”
Highledger-account.comscore 55echoes ledger
brand in the name “ledger”lure words (login, verify, secure…) “account”
Highlegalvanguard.netscore 55echoes vanguard· boilerplate page
brand in the name “vanguard”brand name at a retail registrar “DropCatch.com 886 LLC”identical page on many newborns “173 identical pages”brand name redirects elsewhere “dropcatch.com”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highloadingicloudfile.topscore 55echoes icloud· redirects elsewhere
brand in the name “icloud”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+3 more

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 68%. An opinion, not a finding.

Highlocalhosticloud.clickscore 55echoes icloud· empty page
brand in the name “icloud”TLD with a high abuse rate “click”brand name on a rarely-seen nameserver “myhostdns-ia.pro”brand name at a retail registrar “Sav.com, LLC”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highmetamask-wallet.netscore 55echoes metamask
brand in the name “metamask”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”
Highmetamask-wallet.techscore 55echoes metamask· placeholder page
brand in the name “metamask”lure words (login, verify, secure…) “wallet”brand name and brand-styled page “metamask”

Model opinion: looks like abuse (target: MetaMask), confidence 80%. An opinion, not a finding.

Highmit4u.comscore 55echoes itau
brand spelled with digits “mit4u→itau”brand plus digits “mit4u”brand name on a rarely-seen nameserver “dhosting.pl”brand name at a retail registrar “Ascio Technologies, Inc. Danmark - Filia”
Highmobile-functionservices.comscore 55echoes tmobile
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “service,services”brand name behind Cloudflare “cloudflare.com”
Highmobile-holiganbet.topscore 55echoes tmobile· no web server
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Highmobile-marsbahis.topscore 55echoes tmobile· no web server
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Highmorley-mobile-vehicle-services.comscore 55echoes tmobile
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “service,services”many hyphens “3”very long name “30”+2 more
Highnamescheap.storescore 55echoes namecheap· other
one-letter brand typo “namescheap≈namecheap”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”

Model opinion: looks like abuse (target: Namecheap), confidence 72%. An opinion, not a finding.

Highnatwestcustomerhelp.comscore 55echoes natwest
brand in the name “natwest”lure words (login, verify, secure…) “customer”brand name behind Cloudflare “cloudflare.com”
Highnvidia-asia.comscore 55echoes nvidia· blocked the probe
brand in the name “nvidia”brand name and brand-styled page “nvidia”form on a brand-styled page “has_form”
Highofficial-binance.funscore 55echoes binance· placeholder page
brand in the name “binance”lure words (login, verify, secure…) “official”TLD with a high abuse rate “fun”brand name and brand-styled page “binance”

Model opinion: looks like abuse (target: Binance), confidence 82%. An opinion, not a finding.

Highofficial-binance.xyzscore 55echoes binance· placeholder page
brand in the name “binance”lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”brand name and brand-styled page “binance”

Model opinion: looks like abuse (target: Binance), confidence 82%. An opinion, not a finding.

Highonepulsosoftware-cloud.infoscore 55echoes icloud· registrar placeholder
one-letter brand typo “cloud≈icloud”form on a brand-styled page “has_form”identical page on many newborns “1224 identical pages”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highonepulsosoftware-cloud.storescore 55echoes icloud· registrar placeholder
one-letter brand typo “cloud≈icloud”form on a brand-styled page “has_form”identical page on many newborns “1224 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highopenaiheimer.comscore 55echoes openai· blocked the probe
brand in the name “openai”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Highopenxai.linkscore 55echoes openai· parked, for sale
one-letter brand typo “openxai≈openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”+2 more

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highpay-coinbase.proscore 55echoes coinbase· no DNS
brand in the name “coinbase”lure words (login, verify, secure…) “pay”
Highquickbookssupportnumber.comscore 55echoes quickbooks
brand in the name “quickbooks”lure words (login, verify, secure…) “support”
Highquickbooksupportnumber.comscore 55echoes quickbooks
brand in the name “quickbooks”lure words (login, verify, secure…) “support”

Same data as JSON: /api/zone/risk?day=2026-09-19&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.