dns.pizza

Flagged newborn domains, Monday, October 19, 2026

16 names at tier medium or above in .info, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-2210-2110-2010-1910-1710-1610-1510-1310-1010-09clear filters
Criticalfreedom-mobile.infoscore 60echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Government of Alberta), confidence 95%. An opinion, not a finding.

Highaccidentedetraficosantander.infoscore 55echoes santander· registrar placeholder
brand in the name “santander”form on a brand-styled page “has_form”identical page on many newborns “1163 identical pages”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highdivorciosantander.infoscore 55echoes santander· registrar placeholder
brand in the name “santander”form on a brand-styled page “has_form”identical page on many newborns “1163 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highledger-secure-update.infoscore 55echoes ledger· registrar placeholder
brand in the name “ledger”lure words (login, verify, secure…) “secure,update”form on a brand-styled page “has_form”identical page on many newborns “1163 identical pages”

Model opinion: looks like abuse (target: Ledger), confidence 75%. An opinion, not a finding.

Highmobile-iaccess-web.infoscore 55echoes tmobile· blocked the probe
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “access”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Highsolutionsskintiktok.infoscore 55echoes tiktok· registrar placeholder
brand in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “1163 identical pages”

Model opinion: looks like abuse (target: TikTok), confidence 55%. An opinion, not a finding.

Highpausslot-mobile.infoscore 54echoes tmobile· active website
brand in the name “tmobile”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.

Highcanadapostrescheduling1.infoscore 52echoes canadapost· placeholder page
brand in the name “canadapost”brand plus digits “canadapostrescheduling1”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: looks like abuse (target: Canada Post), confidence 82%. An opinion, not a finding.

Highmy-icloud.infoscore 50echoes icloud· robots.txt denied
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highottawaoutlook.infoscore 44echoes outlook· active website
brand in the name “outlook”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”

Model opinion: looks benign, confidence 74%. An opinion, not a finding.

Highblog-emprendedor.infoscore 42· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.

Mediumanthropicpublicbenefitfund.infoscore 38echoes anthropic· not probed yet
brand in the name “anthropic”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumecommercegrowthautopsy.infoscore 38· active website
brand in page title, not in the name “shopify”form on a brand-styled page “has_form”
Mediumlobov.infoscore 38· active website
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Mediumrakuten-it.infoscore 38echoes rakuten· no web server
brand in the name “rakuten”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediumservicosadvfrancis.infoscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.