dns.pizza

Flagged newborn domains, Thursday, October 8, 2026

2,916 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-0810-0710-0610-0510-0410-0310-0210-0109-3009-28
Highwgetyuncloud.cyouscore 50· active website
TLD with a high abuse rate “cyou”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highxiongmaoyun.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “tiktok”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highyunfanjichang.sbsscore 50· active website
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highzellerhouse.comscore 50echoes zelle
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
High237412coinbase.comscore 49echoes coinbase
brand in the name “coinbase”brand plus digits “237412coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”
High329430coinbase.comscore 49echoes coinbase
brand in the name “coinbase”brand plus digits “329430coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”
Highamazonsnola.orgscore 48echoes amazon· boilerplate page
brand in the name “amazon”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “3019 identical pages”

Model opinion: looks benign, confidence 86%. An opinion, not a finding.

Highbinancefuture.proscore 48echoes binance· boilerplate page
brand in the name “binance”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3019 identical pages”

Model opinion: looks like abuse (target: Binance), confidence 80%. An opinion, not a finding.

Highbobybites.comscore 48echoes bybit· active website
brand in the name “bybit”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “whatsapp”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highcoin-strike-spin.comscore 48echoes stripe
one-letter brand typo “strike≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highde-paypal.comscore 48echoes paypal· boilerplate page
brand in the name “paypal”brand name at a retail registrar “Cloud Yuqu LLC”identical page on many newborns “784 identical pages”

Model opinion: looks like abuse (target: PayPal), confidence 85%. An opinion, not a finding.

Highfinance-cah.storescore 48echoes binance· boilerplate page
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.

Highheres-looking-like-you-kid.comscore 48echoes booking
one-letter brand typo “looking≈booking”many hyphens “4”brand name at a retail registrar “Sav.com, LLC - 5”brand name at a watch-list registrar “Sav.com, LLC - 5”
Highhsbc-deutschland-onlinebanking.comscore 48echoes hsbc
brand in the name “hsbc”very long name “30”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highkiranpcsolutiongmail.shopscore 48echoes gmail· boilerplate page
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com LLC”identical page on many newborns “3019 identical pages”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highkrake.sitescore 48echoes kraken· active website
one-letter brand typo “krake≈kraken”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highledgero.onlinescore 48echoes ledger· not probed yet
one-letter brand typo “ledgero≈ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highmedicar.institutescore 48echoes medicare· empty page
one-letter brand typo “medicar≈medicare”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highprhfed-ye-myshopify-com.storescore 48echoes shopify· other
brand in the name “shopify”many hyphens “3”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highsdarling.storescore 48echoes starling· boilerplate page
one-letter brand typo “sdarling≈starling”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highsgcwin-mobile.linkscore 48echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”
Highspotify-audiobooks-sales-dashboard.comscore 48echoes spotify
brand in the name “spotify”many hyphens “3”very long name “34”brand name at a retail registrar “Squarespace Domains LLC”
Highsupport-expediauk.comscore 48echoes expedia
brand in the name “expedia”lure words (login, verify, secure…) “support”brand name at a retail registrar “IONOS SE”
Hightr-sec-ops-phantomt.comscore 48echoes phantom
one-letter brand typo “phantomt≈phantom”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Hightrezor.unoscore 48echoes trezor· active website
brand in the name “trezor”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”+1 more

Model opinion: looks like phishing (target: Trezor), confidence 86%. An opinion, not a finding.

Highusa-allfenix.comscore 48echoes usaa· boilerplate page
brand in the name “usaa”brand name at a retail registrar “Netregistry Wholesale Pty Ltd”identical page on many newborns “357 identical pages”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highvanguardvanbiz.comscore 48echoes vanguard· boilerplate page
brand in the name “vanguard”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “784 identical pages”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highvelo-finance.comscore 48echoes binance
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highxn--google-u9a.comscore 48echoes google
punycode name “googleı scripts=LATIN”brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
High291033.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 89%. An opinion, not a finding.

High725624-binance.comscore 46echoes binance
brand in the name “binance”brand plus digits “725624-binance”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
High807007.xyzscore 46· redirects elsewhere
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 76%. An opinion, not a finding.

Highactmobile.xyzscore 46echoes tmobile· not probed yet
brand in the name “tmobile”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highaeqespolkc.sbsscore 46· redirects elsewhere
TLD with a high abuse rate “sbs”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highagiamazon.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highalipayhk9013.comscore 46echoes alipay
brand in the name “alipay”brand plus digits “alipayhk9013”brand name at a retail registrar “Guangdong JinWanBang Technology Investme”
Highallocation-near.bondscore 46· blocked the probe
TLD with a high abuse rate “bond”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highallocation-near.cyouscore 46· blocked the probe
TLD with a high abuse rate “cyou”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highallox-ai.icuscore 46· redirects elsewhere
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highamazonagi.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highamazonapp.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highamazonbit.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highamazondao.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highamazongpt.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highamazonnft.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highamazonpfp.xyzscore 46echoes amazon· not probed yet
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highamazonrehedge.cyouscore 46echoes amazon· no DNS
brand in the name “amazon”TLD with a high abuse rate “cyou”brand name at a retail registrar “URL Solutions, Inc.”
Higharamexpost.cfdscore 46echoes aramex· boilerplate page
brand in the name “aramex”TLD with a high abuse rate “cfd”brand name at a retail registrar “NameMart Pte. Ltd.”

Model opinion: looks like abuse (target: Aramex), confidence 80%. An opinion, not a finding.

Higharamexpost.clickscore 46echoes aramex· boilerplate page
brand in the name “aramex”TLD with a high abuse rate “click”brand name at a retail registrar “NameMart Pte. Ltd.”

Model opinion: looks like abuse (target: Aramex), confidence 80%. An opinion, not a finding.

Higharamexpost.skinscore 46echoes aramex· boilerplate page
brand in the name “aramex”TLD with a high abuse rate “skin”brand name at a retail registrar “NameMart Pte. Ltd.”

Model opinion: looks like abuse (target: Aramex), confidence 80%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-08&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.