dns.pizza

Flagged newborn domains, Monday, September 21, 2026

787 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-2109-2009-1909-1809-1709-1609-1509-1409-1309-12
Highcommerzbankpunkteeinlosen257.inkscore 50echoes commerzbank· no web server
brand in the name “commerzbank”very long name “28”brand plus digits “commerzbankpunkteeinlosen257”brand name at a retail registrar “Dominet (HK) Limited”
Highcommerzbankpunkteeinlosen258.inkscore 50echoes commerzbank· blocked the probe
brand in the name “commerzbank”very long name “28”brand plus digits “commerzbankpunkteeinlosen258”brand name at a retail registrar “Dominet (HK) Limited”
Highcommerzbankpunkteeinlosen259.inkscore 50echoes commerzbank· blocked the probe
brand in the name “commerzbank”very long name “28”brand plus digits “commerzbankpunkteeinlosen259”brand name at a retail registrar “Dominet (HK) Limited”
Highcounter-strike.xyzscore 50echoes stripe· active website
one-letter brand typo “strike≈stripe”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “hostingdunyam.net”brand name at a retail registrar “GoDaddy.com, LLC”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Highdewcuptopsite.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”
Highebay-das.orgscore 50echoes ebay· no web server
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highebay-dru.orgscore 50echoes ebay· no web server
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highebay-usr.orgscore 50echoes ebay· no web server
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highequitystocks.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highgiftcardss.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “apple”

Model opinion: looks like a scam, confidence 90%. An opinion, not a finding.

Highgrandeambientehoyinmaquiavel.clickscore 50· redirects elsewhere
very long name “28”TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highhttps-roblox.comscore 50echoes roblox
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highicloudy-find.comscore 50echoes icloud· robots.txt denied
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highikuailianvpn.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse (target: 快连VPN (LetsVPN)), confidence 63%. An opinion, not a finding.

Highikuailianvpn.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse (target: 快连VPN (LetsVPN)), confidence 65%. An opinion, not a finding.

Highikuailianvpn.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highkebaya4dken.lolscore 50echoes ebay· not probed yet
brand in the name “ebay”brand plus digits “kebaya4dken”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”+2 more
Highkhushiprintservice.onlinescore 50· active website
lure words (login, verify, secure…) “service”page asks for credentials “Login to Your Account”login form “has_form+login words”

Model opinion: looks like phishing (target: UIDAI (Aadhaar / Government of India)), confidence 93%. An opinion, not a finding.

Highkrakon.lolscore 50echoes kraken· no web server
one-letter brand typo “krakon≈kraken”TLD with a high abuse rate “lol”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highlive-icloud-direct.infoscore 50echoes icloud· robots.txt denied
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highm-google.cloudscore 50echoes google· not probed yet
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highm-google.supportscore 50echoes google· no DNS
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highmailicloud.storescore 50echoes icloud· not probed yet
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highmercadolivre.momscore 50echoes mercadolibre· server error
one-letter brand typo “mercadolivre≈mercadolibre”TLD with a high abuse rate “mom”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highminance.xyzscore 50echoes binance· no DNS
one-letter brand typo “minance≈binance”TLD with a high abuse rate “xyz”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Highmitcevpn.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highmonerox.funscore 50· active website
TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”brand in page title, not in the name “metamask”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Highmorbiz-googlepartners.infoscore 50echoes google· registrar placeholder
brand in the name “google”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1003 identical pages”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highmorbiz-googlepartners.storescore 50echoes google· registrar placeholder
brand in the name “google”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1003 identical pages”
Highnutflix.xyzscore 50echoes netflix· not probed yet
one-letter brand typo “nutflix≈netflix”TLD with a high abuse rate “xyz”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highnvidia-inu.livescore 50echoes nvidia· active website
brand in the name “nvidia”brand in page title, not in the name “robinhood”

Model opinion: looks like a scam (target: NVIDIA), confidence 85%. An opinion, not a finding.

Highopenaigpt.netscore 50echoes openai
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highpcboost.xyzscore 50· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highrecordcratebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highrecordtradebay.comscore 50echoes ebay
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highresellerstarlink.comscore 50echoes starlink
brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highrobinhoodkingdom.onlinescore 50echoes robinhood· not probed yet
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceadvance.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceapplicant.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceapplicants.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceappoint.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceappointment.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceassign.comscore 50echoes salesforce· no DNS
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforcecandidate.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforcecollab.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforcecrews.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceemployee.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceenlist.comscore 50echoes salesforce· no DNS
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforceenrolling.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsalesforcehirecrew.comscore 50echoes salesforce
brand in the name “salesforce”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Same data as JSON: /api/zone/risk?day=2026-09-21&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.