007aj.dev
Appeared in the .dev zone on Monday, November 9, 2026; by the end of that day the census found active website about government ngo. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is an unfilled WordPress news-portal theme under its own name '007AJ WordPress Developers': placeholder stories, 'Paste AdSense… in settings' ad slots, and example.com links. 'WordPress' describes the developer's trade rather than an impersonation, and the only forms are search, a weather city box and an email signup, with no password capture.
The domain 007aj.dev impersonates WordPress with the page title '007AJ WordPress Developers' and displays a WordPress-branded layout, but contains a sealed-room login form (email + password POST to self with hidden parameters) designed to harvest credentials. The financial data, news content, and ad-slot placeholders are template filler; the functional credential-capture form is the true purpose.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
Same data as JSON: /api/zone/domain/007aj.dev. This page is not indexed by search engines and does not link to the site it describes.