dns.pizza

Flagged newborn domains, Saturday, October 17, 2026

2,593 names at tier medium or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-1710-1610-1510-1310-1010-0910-0810-0710-0610-05
Highusaa-supportcare-usaa.bondscore 55echoes usaa· no DNS
brand in the name “usaa”lure words (login, verify, secure…) “support”TLD with a high abuse rate “bond”brand name behind Cloudflare “cloudflare.com”
Highusaa-supportcare-usaa.cyouscore 55echoes usaa· no DNS
brand in the name “usaa”lure words (login, verify, secure…) “support”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”
Highuspsdeliveryservic.comscore 55echoes usps· excluded
brand in the name “usps”lure words (login, verify, secure…) “delivery”brand name at a retail registrar “Wix.com Ltd.”

Model opinion: looks like abuse (target: USPS), confidence 80%. An opinion, not a finding.

Highvanguardautomanaged.sitescore 55echoes vanguard· registrar placeholder
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: suspicious (target: Vanguard), confidence 60%. An opinion, not a finding.

Highverification-shopify.comscore 55echoes shopify
brand in the name “shopify”lure words (login, verify, secure…) “verification”
Highverifycaptcha-docusign.comscore 55echoes docusign
brand in the name “docusign”lure words (login, verify, secure…) “verify”brand name behind Cloudflare “cloudflare.com”
Highverizongetrewards.comscore 55echoes verizon
brand in the name “verizon”lure words (login, verify, secure…) “reward,rewards”brand name behind Cloudflare “cloudflare.com”
Highverizonrewardperks.comscore 55echoes verizon
brand in the name “verizon”lure words (login, verify, secure…) “reward”brand name behind Cloudflare “cloudflare.com”
Highwalletcoinbase.infoscore 55echoes coinbase· no DNS
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”
Highxbox360gaoqingshipinxian5.babyscore 55echoes xbox· blocked the probe
brand in the name “xbox”brand plus digits “xbox360gaoqingshipinxian5”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highxbox360gaoqingshipinxian6.babyscore 55echoes xbox· blocked the probe
brand in the name “xbox”brand plus digits “xbox360gaoqingshipinxian6”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highxbox360gaoqingshipinxian88.babyscore 55echoes xbox· not probed yet
brand in the name “xbox”brand plus digits “xbox360gaoqingshipinxian88”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highxbox360gaoqingshipinxian9.babyscore 55echoes xbox· blocked the probe
brand in the name “xbox”brand plus digits “xbox360gaoqingshipinxian9”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highxbox360gaoqingshipinxiana.babyscore 55echoes xbox· not probed yet
brand in the name “xbox”brand plus digits “xbox360gaoqingshipinxiana”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highxboxgaoqingshipinxian4.babyscore 55echoes xbox· blocked the probe
brand in the name “xbox”brand plus digits “xboxgaoqingshipinxian4”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highxfinitytechnicalsupport.comscore 55echoes xfinity
brand in the name “xfinity”lure words (login, verify, secure…) “support”
Highxn--instagramtakipi-rmb.comscore 55echoes instagram
punycode name “instagramtakipçi scripts=LATIN”brand in the name “instagram”brand name at a retail registrar “GoDaddy.com, LLC”
Highxn--instagramtakipisatnal-f4b02o.comscore 55echoes instagram
punycode name “instagramtakipçisatınal scripts=LATIN”brand in the name “instagram”brand name at a retail registrar “GoDaddy.com, LLC”
Highxn--tiktokbeeni-0tb.comscore 55echoes tiktok
punycode name “tiktokbeğeni scripts=LATIN”brand in the name “tiktok”brand name at a retail registrar “GoDaddy.com, LLC”
Highxn--tiktoktakipi-udb.comscore 55echoes tiktok
punycode name “tiktoktakipçi scripts=LATIN”brand in the name “tiktok”brand name at a retail registrar “GoDaddy.com, LLC”
Highadobeproject.sitescore 54echoes adobe· registrar placeholder
brand in the name “adobe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3510 identical pages”
Highairbnb.funscore 54echoes airbnb· registrar placeholder
brand in the name “airbnb”TLD with a high abuse rate “fun”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”+1 more

Model opinion: looks like abuse (target: Airbnb), confidence 75%. An opinion, not a finding.

Highbanklinenatwest-help.comscore 54echoes natwest
brand in the name “natwest”lure words (login, verify, secure…) “help”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “OwnRegistrar, Inc.”
Highbbinance.orgscore 54echoes binance· parked, for sale
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “518 identical pages”brand name redirects elsewhere “urldance.com”

Model opinion: looks like abuse (target: Binance), confidence 80%. An opinion, not a finding.

Highchatgptnews.sitescore 54echoes chatgpt· registrar placeholder
brand in the name “chatgpt”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3510 identical pages”
Highdn-smbc-jp.comscore 54echoes smbc· registrar placeholder
brand in the name “smbc”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “634 identical pages”
Highgolgicloud.comscore 54echoes icloud· registrar placeholder
brand in the name “icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “634 identical pages”
Highhelp-coinnbase.comscore 54echoes coinbase
one-letter brand typo “coinnbase≈coinbase”lure words (login, verify, secure…) “help”
Highhelp-santanderconnect.comscore 54echoes santander
brand in the name “santander”lure words (login, verify, secure…) “help”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “OwnRegistrar, Inc.”
Highhuluandeshenjianjunyuanzhumanhua.babyscore 54echoes hulu· not probed yet
brand in the name “hulu”very long name “32”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Highimamivanguard.orgscore 54echoes vanguard· registrar placeholder
brand in the name “vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3510 identical pages”
Highmycostcorewards0081.comscore 54echoes costco
brand in the name “costco”lure words (login, verify, secure…) “reward,rewards”brand plus digits “mycostcorewards0081”
Highmycostcorewards0081.onlinescore 54echoes costco· no DNS
brand in the name “costco”lure words (login, verify, secure…) “reward,rewards”brand plus digits “mycostcorewards0081”
Highmycostcorewards1148.comscore 54echoes costco
brand in the name “costco”lure words (login, verify, secure…) “reward,rewards”brand plus digits “mycostcorewards1148”
Highmycostcorewards1149.comscore 54echoes costco· placeholder page
brand in the name “costco”lure words (login, verify, secure…) “reward,rewards”brand plus digits “mycostcorewards1149”

Model opinion: looks like abuse (target: Costco), confidence 77%. An opinion, not a finding.

Highopenai6.topscore 54echoes openai· empty page
brand in the name “openai”brand plus digits “openai6”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: looks like abuse (target: OpenAI), confidence 70%. An opinion, not a finding.

Highopenai66.topscore 54echoes openai· active website
brand in the name “openai”brand plus digits “openai66”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”

Model opinion: looks like abuse (target: OpenAI), confidence 70%. An opinion, not a finding.

Highrealverifycationosaccount.comscore 54echoes ionos
brand in the name “ionos”lure words (login, verify, secure…) “account,verify”brand name at a retail registrar “IONOS SE”
Highrevolutionmedia.onlinescore 54echoes revolut· registrar placeholder
brand in the name “revolut”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3510 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highrevolutionsbeauty.comscore 54echoes revolut· registrar placeholder
brand in the name “revolut”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “634 identical pages”

Model opinion: suspicious (target: Revolution Beauty), confidence 55%. An opinion, not a finding.

Highrewardspalace.appscore 54· active website
lure words (login, verify, secure…) “reward,rewards”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highrobloxcheatshacks.xyzscore 54echoes roblox· boilerplate page
brand in the name “roblox”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “98 identical pages”

Model opinion: looks like abuse (target: Roblox), confidence 70%. An opinion, not a finding.

Highsecure-finance.storescore 54echoes binance· no DNS
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “secure”
Highsharepointfile-pdfshare-efile.comscore 54echoes sharepoint
brand in the name “sharepoint”very long name “29”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highsparkassenstiftung-caucasus.orgscore 54echoes sparkasse· boilerplate page
brand in the name “sparkasse”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1737 identical pages”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Highstripe3dmodel.xyzscore 54echoes stripe· not probed yet
brand in the name “stripe”brand plus digits “stripe3dmodel”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highstripe3dprint.xyzscore 54echoes stripe· not probed yet
brand in the name “stripe”brand plus digits “stripe3dprint”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Highsupport-gooqle.comscore 54echoes google
one-letter brand typo “gooqle≈google”lure words (login, verify, secure…) “support”
Highthe-piratebay.proscore 54echoes ebay· active website
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Hightiktok88fun.cloudscore 54echoes tiktok· boilerplate page
brand in the name “tiktok”brand plus digits “tiktok88fun”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “70 identical pages”

Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-17&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.