dns.pizza

Flagged newborn domains, Thursday, October 15, 2026

2,613 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-1510-1310-1010-0910-0810-0710-0610-0510-0410-03
Highsealsrobin.funscore 50· active website
TLD with a high abuse rate “fun”page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highsicurezza-paypal.comscore 50echoes paypal
brand in the name “paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highsoporte-icloud.latscore 50echoes icloud· boilerplate page
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious (target: Apple iCloud), confidence 72%. An opinion, not a finding.

Highstarlinknx.comscore 50echoes starlink
brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highthecivicoutlook.sitescore 50echoes outlook· robots.txt denied
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Hightiktokcdn.fyiscore 50echoes tiktok· no DNS
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Hightraderstripe.sitescore 50echoes stripe· active website
brand in the name “stripe”brand name on a rarely-seen nameserver “olitt.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Hightrench-strike.funscore 50echoes stripe· empty page
one-letter brand typo “strike≈stripe”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highusaarms.netscore 50echoes usaa
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highuspsforum.comscore 50echoes usps· not probed yet
brand in the name “usps”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highvanguardwildlifemgmt.comscore 50echoes vanguard
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highwinxbox.barscore 50echoes xbox· no DNS
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
Highwinxbox.latscore 50echoes xbox· no DNS
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highwulkan-mobile.cfdscore 50echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highwww-find-icloud-arg.comscore 50echoes icloud
brand in the name “icloud”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gransy, s.r.o.”
Highzlusaa.comscore 50echoes usaa
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
High619032coinbase.comscore 49echoes coinbase
brand in the name “coinbase”brand plus digits “619032coinbase”random-looking name “H=3.81”brand name behind Cloudflare “cloudflare.com”
High809031coinbase.comscore 49echoes coinbase
brand in the name “coinbase”brand plus digits “809031coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”
Highbagus44.barscore 49echoes usaa· no DNS
brand spelled with digits “bagus44→usaa”brand plus digits “bagus44”brand name behind Cloudflare “cloudflare.com”
Highstella-spectrum.comscore 49echoes spectrum· active website
ambiguous brand word “spectrum”brand name at a retail registrar “Tucows Domains Inc.”page impersonates a brand “Microsoft 365”brand name and brand-styled page “spectrum”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highaltpay.asiascore 48echoes alipay· active website
one-letter brand typo “altpay≈alipay”brand name on a rarely-seen nameserver “anymhost.id”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”

Model opinion: suspicious (target: Alipay), confidence 62%. An opinion, not a finding.

Highamericanbestbuy.orgscore 48echoes bestbuy· boilerplate page
brand in the name “bestbuy”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “1957 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highbatt-com.comscore 48echoes attcom· boilerplate page
brand in the name “attcom”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “580 identical pages”

Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.

Highboytoto-mobile.comscore 48echoes tmobile
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highcasibom-mobile.onlinescore 48echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highcloud-finds.infoscore 48echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highcoin-strike.inkscore 48echoes stripe· active website
one-letter brand typo “strike≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: looks like abuse (target: Google Play), confidence 86%. An opinion, not a finding.

Highcouupang.storescore 48echoes coupang· no DNS
one-letter brand typo “couupang≈coupang”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highfedexflex.netscore 48echoes fedex· boilerplate page
brand in the name “fedex”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “580 identical pages”

Model opinion: suspicious (target: FedEx), confidence 55%. An opinion, not a finding.

Highferal-cloud.comscore 48echoes icloud
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highgcloud-cdn.comscore 48echoes icloud
one-letter brand typo “gcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highglobaloutlook.worldscore 48echoes outlook· boilerplate page
brand in the name “outlook”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “1957 identical pages”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highhornier-sterling.comscore 48echoes starling
one-letter brand typo “sterling≈starling”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highintuitive-si.comscore 48echoes intuit· boilerplate page
brand in the name “intuit”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “580 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highlbpi-mobile.onlinescore 48echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highlcloud-assistant-findmy.comscore 48echoes icloud· no DNS
one-letter brand typo “lcloud≈icloud”brand name on a rarely-seen nameserver “vipdigitalservices.pro”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highlcloud-flnd.livescore 48echoes icloud· boilerplate page
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”

Model opinion: looks like phishing (target: Apple iCloud), confidence 75%. An opinion, not a finding.

Highmobile-singatoto.sitescore 48echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highneoflix.latscore 48echoes netflix· not probed yet
one-letter brand typo “neoflix≈netflix”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highprime-amzon.comscore 48echoes amazon
one-letter brand typo “amzon≈amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highshopfy.bestscore 48echoes shopify· not probed yet
one-letter brand typo “shopfy≈shopify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highshopfy.websitescore 48echoes shopify· not probed yet
one-letter brand typo “shopfy≈shopify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highslackline-coach.infoscore 48echoes slack· boilerplate page
brand in the name “slack”brand name at a retail registrar “RegistryGate GmbH”identical page on many newborns “26 identical pages”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highslacklinecoach.infoscore 48echoes slack· boilerplate page
brand in the name “slack”brand name at a retail registrar “RegistryGate GmbH”identical page on many newborns “26 identical pages”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highstripedstyle.comscore 48echoes stripe· boilerplate page
brand in the name “stripe”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “580 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Hightremor.cloudscore 48echoes trezor· no DNS
one-letter brand typo “tremor≈trezor”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
High14758.clickscore 46· blocked the probe
TLD with a high abuse rate “click”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highabouzar.workscore 46· active website
TLD with a high abuse rate “work”brand in page title, not in the name “shopify”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 98%. An opinion, not a finding.

Highaddtolibrary.funscore 46· active website
TLD with a high abuse rate “fun”brand in page title, not in the name “steam”form on a brand-styled page “has_form”
Highai-key-checker.xyzscore 46· active website
TLD with a high abuse rate “xyz”brand in page title, not in the name “openai”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.