dns.pizza

Flagged newborn domains, Tuesday, October 6, 2026

2,902 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-0610-0510-0410-0310-0210-0109-3009-2809-2709-26
Hightektok.cyouscore 50echoes tiktok· active website
one-letter brand typo “tektok≈tiktok”TLD with a high abuse rate “cyou”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: looks like a scam (target: TikTok), confidence 86%. An opinion, not a finding.

Highthetiktokgiftshop.infoscore 50echoes tiktok· registrar placeholder
brand in the name “tiktok”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1449 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highthetiktokgiftshop.orgscore 50echoes tiktok· registrar placeholder
brand in the name “tiktok”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1449 identical pages”

Model opinion: looks benign, confidence 43%. An opinion, not a finding.

Highthetiktokgiftshop.storescore 50echoes tiktok· registrar placeholder
brand in the name “tiktok”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1449 identical pages”

Model opinion: looks benign, confidence 40%. An opinion, not a finding.

Highusaaporiatrade.casascore 50echoes usaa· no DNS
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun”brand name at a watch-list registrar “Porkbun”
Highvanguardteamus.comscore 50echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highwhatapp.momscore 50echoes whatsapp· no web server
one-letter brand typo “whatapp≈whatsapp”TLD with a high abuse rate “mom”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highwhyrobinhood.lifescore 50echoes robinhood· active website
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Devexpanse Ltd d/b/a Regery.com”brand name at a watch-list registrar “Devexpanse Ltd d/b/a Regery.com”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highxbox-line.netscore 50echoes xbox
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highxingyunvpn.momscore 50· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highxlcjiasuqi.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highxxyun1.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highyassinnusaa.sitescore 50echoes usaa· active website
brand in the name “usaa”brand in page title, not in the name “wordpress”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highyfyvpn.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highyfyvpn.momscore 50· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highyinyuncloud.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highyinyuncloud.lolscore 50· active website
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highyinyuncloud.topscore 50· active website
TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Highyoutuyuncloud.homesscore 50· active website
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”
Highyoutuyuncloud.momscore 50· active website
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”
Highaag-schulungsportal.comscore 48echoes hulu
brand in the name “hulu”lure words (login, verify, secure…) “portal”brand name at a retail registrar “InterNetX GmbH”
Highamazok-de.comscore 48echoes amazon
one-letter brand typo “amazok≈amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highamazok-it.comscore 48echoes amazon
one-letter brand typo “amazok≈amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highbarclays-onlinebanking-deutschland.comscore 48echoes barclays
brand in the name “barclays”very long name “34”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highcapital-finance-loans.comscore 48echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highchatgptbreakingnews.appscore 48echoes chatgpt· boilerplate page
brand in the name “chatgpt”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3985 identical pages”

Model opinion: looks like abuse (target: OpenAI (ChatGPT)), confidence 55%. An opinion, not a finding.

Highcooking-sun.livescore 48echoes booking· not probed yet
one-letter brand typo “cooking≈booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highdefundnetflix.infoscore 48echoes netflix· boilerplate page
brand in the name “netflix”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3985 identical pages”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highdefundnetflix.orgscore 48echoes netflix· boilerplate page
brand in the name “netflix”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3985 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highdefundnetflix.storescore 48echoes netflix· boilerplate page
brand in the name “netflix”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3985 identical pages”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highhttps-lcloud.onlinescore 48echoes icloud· robots.txt denied
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highintesaonline.cloudscore 48echoes intesa· boilerplate page
brand in the name “intesa”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “3985 identical pages”

Model opinion: looks like abuse (target: Intesa Sanpaolo), confidence 60%. An opinion, not a finding.

Highios-mobile.livescore 48echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highkyt-finance.comscore 48echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highlc-loud.latscore 48echoes icloud· boilerplate page
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks like abuse (target: Apple (iCloud)), confidence 60%. An opinion, not a finding.

Highlcloud.centerscore 48echoes icloud· robots.txt denied
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highlucky-coin-strike.lifescore 48echoes stripe· other
one-letter brand typo “strike≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highplay-games-gogle.comscore 48echoes google
one-letter brand typo “gogle≈google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highqbo-intuitsupport.comscore 48echoes intuit
brand in the name “intuit”lure words (login, verify, secure…) “support”brand name at a retail registrar “IONOS SE”
Highroyalvanguard.worldscore 48echoes vanguard· boilerplate page
brand in the name “vanguard”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3985 identical pages”

Model opinion: looks benign, confidence 43%. An opinion, not a finding.

Highsaeed-cloud.sitescore 48echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highsgc-mobile.comscore 48echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Hightezor.netscore 48echoes trezor
one-letter brand typo “tezor≈trezor”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highwordpressworkshop.onlinescore 48echoes wordpress· boilerplate page
brand in the name “wordpress”brand name at a retail registrar “Network Solutions, LLC”identical page on many newborns “91 identical pages”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highxn--binane-f1a.comscore 48echoes binance
punycode name “binanće scripts=LATIN”brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Highxn--googl-yza.comscore 48echoes google
punycode name “googlĕ scripts=LATIN”brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highxn--oraaodesaobento-gmb.sitescore 48· registrar placeholder
punycode name “oraçaodesaobento scripts=LATIN”brand in page title, not in the name “hostinger”identical page on many newborns “101 identical pages”

Model opinion: looks benign, confidence 77%. An opinion, not a finding.

Hightwitter.xyzscore 47echoes twitter· parked, for sale
brand in the name “twitter”TLD with a high abuse rate “xyz”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+1 more

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

High156221-binance.comscore 46echoes binance
brand in the name “binance”brand plus digits “156221-binance”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
High21voffice365.comscore 46echoes office365· no DNS
brand in the name “office365”brand plus digits “21voffice365”brand name at a retail registrar “July Name Limited”

Same data as JSON: /api/zone/risk?day=2026-10-06&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.