dns.pizza

Flagged newborn domains, Wednesday, October 28, 2026

21 names at tier critical or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-2810-2710-2610-2510-2410-2310-2210-2110-2010-19
Criticalbigbinanceballs.xyzscore 83echoes binance· active website
brand in the name “binance”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “BINANCE”+2 more

Model opinion: looks like a scam (target: Binance), confidence 75%. An opinion, not a finding.

Criticaltiktoktomp4.appscore 77echoes tiktok· active website
brand in the name “tiktok”brand plus digits “tiktoktomp4”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”+1 more

Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.

Criticalpaymentsfraud.orgscore 72· active website
lure words (login, verify, secure…) “payment,payments”page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Criticalstriperia-support.appscore 71echoes stripe· active website
brand in the name “stripe”lure words (login, verify, secure…) “support”brand name and brand-styled page “stripe”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Criticaltelegramchannel.sitescore 69echoes telegram· active website
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Criticalautotraderoblox.onlinescore 68echoes roblox· active website
brand in the name “roblox”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Criticaldefibkk.xyzscore 68· active website
TLD with a high abuse rate “xyz”page impersonates a brand “Binance”brand in page title, not in the name “binance”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

Criticalozsalyapro.comscore 68· active website
page asks for credentials “Login to your account”brand in page title, not in the name “rakuten”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Ozon), confidence 85%. An opinion, not a finding.

Criticalanthropicai.shopscore 67echoes anthropic· active website
brand in the name “anthropic”page impersonates a brand “MetaMask”brand name and brand-styled page “anthropic”

Model opinion: looks like a scam (target: Anthropic), confidence 85%. An opinion, not a finding.

Criticalfolll.comscore 66· active website
page asks for credentials “log in to your account”page impersonates a brand “PayPal”login form “has_form+login words”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Criticalnvidia-broadcast.netscore 65echoes nvidia· active website
brand in the name “nvidia”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more

Model opinion: looks like abuse (target: NVIDIA), confidence 85%. An opinion, not a finding.

Criticallegisvanguard.blogscore 63echoes vanguard· active website
brand in the name “vanguard”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 88%. An opinion, not a finding.

Criticalrobbinhood.spacescore 62echoes robinhood· active website
one-letter brand typo “robbinhood≈robinhood”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand in page title, not in the name “robinhood”

Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.

Criticalshop33degrees.comscore 61echoes shopee· active website
brand spelled with digits “shop33degrees→shopee”brand plus digits “shop33degrees”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Criticalder-kaffeeladen.businessscore 60· active website
page impersonates a brand “Paypal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Criticaldiamondiptv8k.comscore 60· active website
page impersonates a brand “Paypal”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 77%. An opinion, not a finding.

Criticalduoready.appscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalfideslock.onlinescore 60· active website
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.

Criticalmintelligence.appscore 60· active website
page impersonates a brand “HMRC”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Criticalredecanais.coursesscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.

Criticalyasilvercare.comscore 60· active website
page impersonates a brand “FedEx”brand in page title, not in the name “fedex”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-28&tier=critical. Screenshots and the model's reasoning are on each domain's evidence page.