dns.pizza

Flagged newborn domains, Monday, October 19, 2026

13 names at tier high or above in .shop, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-2310-2210-2110-2010-1910-1710-1610-1510-1310-10clear filters
Criticalottwala.shopscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalstarcard.shopscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Hightiktok-verify.shopscore 55echoes tiktok· redirects elsewhere
brand in the name “tiktok”lure words (login, verify, secure…) “verify”brand name on a rarely-seen nameserver “hospedajeydominios.com”brand name redirects elsewhere “ontrackers.app”

Model opinion: looks like abuse (target: TikTok), confidence 75%. An opinion, not a finding.

Highamason-sy.shopscore 54echoes amazon· active website
one-letter brand typo “amason≈amazon”brand name at a retail registrar “Key-Systems LLC”form on a brand-styled page “has_form”

Model opinion: looks like abuse (target: Amazon), confidence 62%. An opinion, not a finding.

Highzzizelle.shopscore 54echoes zelle· parked, for sale
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “386 identical pages”brand name redirects elsewhere “urldance.com”

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highamazon-pago.shopscore 52echoes amazon· redirects elsewhere
brand in the name “amazon”brand name on a rarely-seen nameserver “hospedajeydominios.com”brand name at a retail registrar “Soluciones Corporativas IP, SL”brand name redirects elsewhere “ontrackers.app”

Model opinion: looks like abuse (target: Amazon), confidence 77%. An opinion, not a finding.

Highffpanelsell.shopscore 52· active website
page asks for credentials “Login to Account”page impersonates a brand “Binance”

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highdipperaccounts.shopscore 50· active website
lure words (login, verify, secure…) “account,accounts”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Highepi-services.shopscore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 74%. An opinion, not a finding.

Highrextracking.shopscore 50· redirects elsewhere
lure words (login, verify, secure…) “track,tracking”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 41%. An opinion, not a finding.

Hightiktokk-achados.shopscore 44echoes tiktok· robots.txt denied
brand in the name “tiktok”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highturnstone-bay.shopscore 44echoes ebay· robots.txt denied
brand in the name “ebay”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Highaioffer.shopscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.