dns.pizza

Flagged newborn domains, Saturday, September 26, 2026

393 names at tier high or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:09-2709-2609-2509-2209-2109-2009-1909-1809-1709-16
Highjeevandeshmukh.devscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highlapfreelance56.onlinescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highluminoussolutions.cloudscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highmicresoft.topscore 42echoes microsoft· no DNS
one-letter brand typo “micresoft≈microsoft”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Microsoft), confidence 70%. An opinion, not a finding.

Highnfap-finance.xyzscore 42echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: binance), confidence 44%. An opinion, not a finding.

Highniceduck.bestscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highoperacionescjrmultiservicios.comscore 42· redirects elsewhere
very long name “28”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highoutletglobal.onlinescore 42· active website
page impersonates a brand “FedEx”brand in page title, not in the name “fedex”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Highpearlbnb.latscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.

Highperpdeck.appscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “telegram”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highqoogle.downloadscore 42echoes google· no web server
one-letter brand typo “qoogle≈google”TLD with a high abuse rate “download”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: Google), confidence 70%. An opinion, not a finding.

Highroofingcontractorbradfordwestgwillimbury.shopscore 42· active website
very long name “40”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highroofingcontractorscarborough.storescore 42· active website
very long name “28”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highrosneft-finance.xyzscore 42echoes binance· not probed yet
one-letter brand typo “finance≈binance”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: binance), confidence 42%. An opinion, not a finding.

Highsaphir-shop.storescore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highseven-casino-online.inkscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highshanshuiyun.proscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highshaunmajithia.cloudscore 42· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highsuibianyun.beerscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 46%. An opinion, not a finding.

Highthesaturnhood.sitescore 42· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: looks like a scam (target: Robinhood), confidence 85%. An opinion, not a finding.

Hightiktoi.topscore 42echoes tiktok· robots.txt denied
one-letter brand typo “tiktoi≈tiktok”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.

Hightokenactivation.spacescore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks like phishing (target: Binance), confidence 82%. An opinion, not a finding.

Hightulicencia.netscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highvirtualmoneyexchanger.comscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious, confidence 43%. An opinion, not a finding.

Highvitthalrukminibhaktaniwaspandharpur.onlinescore 42· active website
very long name “35”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highwraithplayer.appscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highyiyun-ti.latscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

High900913.netscore 41echoes google
brand spelled with digits “900913→google”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: google), confidence 49%. An opinion, not a finding.

Highbcl-training-mail.infoscore 40echoes gmail· boilerplate page
brand in the name “gmail”identical page on many newborns “2755 identical pages”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highbcltraining-mail.infoscore 40echoes gmail· boilerplate page
brand in the name “gmail”identical page on many newborns “2755 identical pages”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highcontointesa.orgscore 40echoes intesa· boilerplate page
brand in the name “intesa”identical page on many newborns “2755 identical pages”

Model opinion: looks like abuse (target: Intesa Sanpaolo), confidence 70%. An opinion, not a finding.

Highempoweredcoinbaseofficial.comscore 40echoes coinbase
brand in the name “coinbase”lure words (login, verify, secure…) “official”

Model opinion: suspicious (target: coinbase), confidence 79%. An opinion, not a finding.

Highgonzalezgonzalezcervicellcgmail.netscore 40echoes gmail
brand in the name “gmail”very long name “31”brand name behind Cloudflare “cloudflare.com”

Model opinion: suspicious (target: gmail), confidence 65%. An opinion, not a finding.

Highgoogleapi.proscore 40echoes google· boilerplate page
brand in the name “google”identical page on many newborns “1451 identical pages”

Model opinion: looks like abuse (target: Google), confidence 70%. An opinion, not a finding.

Highilluminatifraternityofficial.orgscore 40· registrar placeholder
lure words (login, verify, secure…) “official”very long name “28”brand in page title, not in the name “hostinger”identical page on many newborns “56 identical pages”

Model opinion: looks benign, confidence 74%. An opinion, not a finding.

Highlocation-icloud.infoscore 40echoes icloud· boilerplate page
brand in the name “icloud”identical page on many newborns “54 identical pages”

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 80%. An opinion, not a finding.

Highmizuhofukushi.orgscore 40echoes mizuho· registrar placeholder
brand in the name “mizuho”identical page on many newborns “71 identical pages”

Model opinion: looks benign, confidence 76%. An opinion, not a finding.

Highmodernrobinhood.orgscore 40echoes robinhood· boilerplate page
brand in the name “robinhood”identical page on many newborns “2755 identical pages”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highneworderlensartgmail.orgscore 40echoes gmail· boilerplate page
brand in the name “gmail”identical page on many newborns “2755 identical pages”

Model opinion: looks like abuse (target: Gmail), confidence 60%. An opinion, not a finding.

Highsanshopee.storescore 40echoes shopee· boilerplate page
brand in the name “shopee”identical page on many newborns “2755 identical pages”

Model opinion: looks like abuse (target: Shopee), confidence 60%. An opinion, not a finding.

Highsmbcrad-rm.ripscore 40echoes smbc· boilerplate page
brand in the name “smbc”identical page on many newborns “2755 identical pages”

Model opinion: looks like abuse (target: SMBC (Sumitomo Mitsui Banking Corporation / SMBC Card)), confidence 72%. An opinion, not a finding.

Highsmbcrad-un.ripscore 40echoes smbc· boilerplate page
brand in the name “smbc”identical page on many newborns “2755 identical pages”

Model opinion: looks like abuse (target: SMBC (Sumitomo Mitsui Card)), confidence 72%. An opinion, not a finding.

Highspotifybookmarks.appscore 40echoes spotify· boilerplate page
brand in the name “spotify”identical page on many newborns “2755 identical pages”

Model opinion: looks like abuse (target: Spotify), confidence 55%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-09-26&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.