dns.pizza

Flagged newborn domains, Thursday, November 12, 2026

11,793 names at tier low or above, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:11-1211-1111-1011-0911-0611-0511-0411-0311-0211-01
Highus03web-zoom.topscore 55echoes zoom· empty page
brand in the name “zoom”brand plus digits “us03web-zoom”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more

Model opinion: looks like phishing (target: Zoom), confidence 75%. An opinion, not a finding.

Highus2-zoom.livescore 55echoes zoom· not probed yet
brand in the name “zoom”brand plus digits “us2-zoom”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highus2-zoom.questscore 55echoes zoom· redirects elsewhere
brand in the name “zoom”brand plus digits “us2-zoom”TLD with a high abuse rate “quest”brand name behind Cloudflare “cloudflare.com”+1 more

Model opinion: looks like abuse (target: Zoom), confidence 77%. An opinion, not a finding.

Highvalidation-myshopify.comscore 55echoes shopify
brand in the name “shopify”lure words (login, verify, secure…) “validation”brand name behind Cloudflare “cloudflare.com”
Highvanguardrainbowsalesandservice.comscore 55echoes vanguard
brand in the name “vanguard”lure words (login, verify, secure…) “service”very long name “30”
Highvanguardservicesvc.comscore 55echoes vanguard
brand in the name “vanguard”lure words (login, verify, secure…) “service,services”
Highverifying-cloud.comscore 55echoes icloud
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “verify”brand name behind Cloudflare “cloudflare.com”
Highvirgin-mobile.icuscore 55echoes tmobile· boilerplate page
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “icu”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”+1 more

Model opinion: looks like abuse (target: Virgin Mobile), confidence 70%. An opinion, not a finding.

Highvitau.xyzscore 55echoes itau· boilerplate page
brand in the name “itau”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “2265 identical pages”

Model opinion: looks benign, confidence 75%. An opinion, not a finding.

Highvolleyball.clickscore 55· registrar placeholder
TLD with a high abuse rate “click”brand in page title, not in the name “hostinger”form on a brand-styled page “has_form”identical page on many newborns “70 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highwebpeak-whatsapp.comscore 55echoes whatsapp· redirects elsewhere
brand in the name “whatsapp”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”form on a brand-styled page “has_form”brand name redirects elsewhere “yahoo.com”

Model opinion: looks like abuse (target: WhatsApp), confidence 72%. An opinion, not a finding.

Highwechatagent.xyzscore 55echoes wechat· no DNS
brand in the name “wechat”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”+1 more
Highwinkiicloud.topscore 55echoes icloud· boilerplate page
brand in the name “icloud”TLD with a high abuse rate “top”brand name at a retail registrar “West263 International Limited”identical page on many newborns “30 identical pages”

Model opinion: suspicious, confidence 50%. An opinion, not a finding.

Highwordpressdevelopmentservices.netscore 55echoes wordpress
brand in the name “wordpress”lure words (login, verify, secure…) “service,services”very long name “28”
Highxn--bclflower32-2qbbb.xyzscore 55· registrar placeholder
punycode name “bėcėlėflower32 scripts=LATIN”TLD with a high abuse rate “xyz”brand in page title, not in the name “hostinger”form on a brand-styled page “has_form”+1 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highxn--javieraloistalaciones-j5b.onlinescore 55· registrar placeholder
punycode name “javieraloéistalaciones scripts=LATIN”brand in page title, not in the name “hostinger”form on a brand-styled page “has_form”identical page on many newborns “70 identical pages”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

High06-water-delivery.shopscore 54· registrar placeholder
lure words (login, verify, secure…) “delivery”brand in page title, not in the name “hostinger”form on a brand-styled page “has_form”identical page on many newborns “70 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highallaccessdisneyland.comscore 54echoes disney
brand in the name “disney”lure words (login, verify, secure…) “access”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highallegerintuit.cyouscore 54echoes intuit· blocked the probe
brand in the name “intuit”TLD with a high abuse rate “cyou”brand name at a retail registrar “Domain Science Kutatási Szolgáltató Korl”brand name redirects elsewhere “expireddomains.com”
Highapple-16p.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-16p”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-17pm.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-17pm”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-3a.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-3a”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-6a.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-6a”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-7a.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-7a”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-9a.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-9a”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-af9.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-af9”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-ap4.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ap4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-as4.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-as4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-aw4.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-aw4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-df9.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-df9”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-dy9.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-dy9”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-fk7.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-fk7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-fs7.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-fs7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-ip6.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ip6”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-ip7.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ip7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highapple-ip9.topscore 54echoes apple· no web server
brand in the name “apple”brand plus digits “apple-ip9”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
Highbonus-strike-casino.orgscore 54echoes stripe· no DNS
one-letter brand typo “strike≈stripe”lure words (login, verify, secure…) “bonus”
Highcloud-sage100.onlinescore 54echoes icloud· registrar placeholder
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-sage100”brand name at a retail registrar “InterNetX GmbH”identical page on many newborns “197 identical pages”

Model opinion: looks like abuse (target: Sage), confidence 55%. An opinion, not a finding.

Highcloud-sage100.orgscore 54echoes icloud· registrar placeholder
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-sage100”brand name at a retail registrar “InterNetX GmbH”identical page on many newborns “197 identical pages”

Model opinion: suspicious (target: Sage), confidence 50%. An opinion, not a finding.

Highframe-x.onlinescore 54echoes aramex· boilerplate page
one-letter brand typo “framex≈aramex”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “99 identical pages”brand name redirects elsewhere “expiredwixdomain.com”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highkundenportal-cloud.comscore 54echoes icloud
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “portal”
Highla-mobile-detailing.comscore 54echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “Automattic Inc.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highlacebook.onlinescore 54echoes facebook· active website
one-letter brand typo “lacebook≈facebook”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “facebook”

Model opinion: looks like phishing (target: Facebook), confidence 98%. An opinion, not a finding.

Highmeet-google-video-call.chatscore 54echoes google· boilerplate page
brand in the name “google”many hyphens “3”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2265 identical pages”

Model opinion: looks like abuse (target: Google), confidence 74%. An opinion, not a finding.

Highmizuho-blog.partyscore 54echoes mizuho· active website
brand in the name “mizuho”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 62%. An opinion, not a finding.

Highmonetizetiktok.comscore 54echoes tiktok· registrar placeholder
brand in the name “tiktok”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “633 identical pages”

Model opinion: looks like abuse (target: TikTok), confidence 55%. An opinion, not a finding.

Highnintendome.onlinescore 54echoes nintendo· registrar placeholder
brand in the name “nintendo”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3284 identical pages”

Model opinion: looks like abuse (target: Nintendo), confidence 55%. An opinion, not a finding.

Highopenairhome.shopscore 54echoes openai· active website
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam (target: GCI Outdoor), confidence 80%. An opinion, not a finding.

Highorchardlinemethod.comscore 54echoes lineme· redirects elsewhere
brand in the name “lineme”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”+1 more

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highpaypal-konto-hilfe-sicherheitszentrum.comscore 54echoes paypal
brand in the name “paypal”many hyphens “3”very long name “37”brand name behind Cloudflare “cloudflare.com”+1 more

Same data as JSON: /api/zone/risk?day=2026-11-12&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.