Flagged newborn domains, Tuesday, October 13, 2026

304 names at tier low or above in .org, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalaboly.orgscore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.

Criticaleduk-ai.orgscore 60· active website
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalpaigeashlyn.orgscore 60· active website
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highrobloxpastebin.orgscore 59echoes roblox· active website
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “roblox”

Model opinion: looks like abuse (target: Roblox), confidence 60%. An opinion, not a finding.

Highvanguardprogram.orgscore 59echoes vanguard· active website
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”brand name and brand-styled page “vanguard”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highrevolutionperminute.orgscore 58echoes revolut· active website
brand in the name “revolut”brand name at a retail registrar “OVH sas”brand in page title, not in the name “wordpress”

Model opinion: looks benign, confidence 90%. An opinion, not a finding.

Highadobesupport.orgscore 55echoes adobe· no DNS
brand in the name “adobe”lure words (login, verify, secure…) “support”

Model opinion: suspicious (target: adobe), confidence 65%. An opinion, not a finding.

Highcoown-finance.orgscore 55echoes binance· redirects elsewhere
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highsecurity-mobile.orgscore 55echoes tmobile· redirects elsewhere
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “google”+2 more

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Hightelegram-auth.orgscore 55echoes telegram· not probed yet
brand in the name “telegram”lure words (login, verify, secure…) “auth”
Highsecurity-mail-lnstagram.orgscore 54echoes instagram· empty page
one-letter brand typo “lnstagram≈instagram”lure words (login, verify, secure…) “security”

Model opinion: looks like abuse (target: Instagram), confidence 85%. An opinion, not a finding.

Highamazonew.orgscore 50echoes amazon· not probed yet
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highasian4d-mobile.orgscore 50echoes tmobile· not probed yet
one-letter brand typo “mobile≈tmobile”brand plus digits “asian4d-mobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Highkakao-tech-ai-class.orgscore 50echoes kakao· active website
brand in the name “kakao”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highkkservices.orgscore 50· active website
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 89%. An opinion, not a finding.

Highphebay.orgscore 50echoes ebay· not probed yet
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highspxbox.orgscore 50echoes xbox· not probed yet
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highyadinsure.orgscore 44· active website
page asks for credentials “Sign in to your account”login form “has_form+login words”

Model opinion: looks benign, confidence 65%. An opinion, not a finding.

Highbrechave.orgscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “telegram”

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Highe-corp-cloud.orgscore 42echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highreferral-code.orgscore 42· active website
page impersonates a brand “Binance”brand in page title, not in the name “binance”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightidalcn.orgscore 42· active website
page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Mediumledger-info.orgscore 39echoes ledger· active website
ambiguous brand word “ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Mediumarrestsearch.orgscore 38· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Mediumbookitapp.orgscore 38· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Mediumbullionos.orgscore 38echoes ionos· excluded
brand in the name “ionos”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumdgblogistics.orgscore 38· active website
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Mediumfosterjobs.orgscore 38· active website
brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Mediummmptravels.orgscore 38· active website
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Mediumnvidiasecuritieslitigation.orgscore 38echoes nvidia· redirects elsewhere
brand in the name “nvidia”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumnvidiasi.orgscore 38echoes nvidia· robots.txt denied
brand in the name “nvidia”brand name at a retail registrar “Squarespace Domains LLC”
Mediumprotecttodefend.orgscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumretirefromcostco.orgscore 38echoes costco· robots.txt denied
brand in the name “costco”brand name at a retail registrar “Squarespace Domains LLC”
Mediumsalesforceasi.orgscore 38echoes salesforce· excluded
brand in the name “salesforce”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumsoulgamesstudio.orgscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumsouthernvista1.orgscore 38· redirects elsewhere
brand in page title, not in the name “facebook”form on a brand-styled page “has_form”
Mediumtelemoney.orgscore 38· active website
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Mediumvikfl.orgscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumbeyond-finance.orgscore 36echoes binance· robots.txt denied
one-letter brand typo “finance≈binance”brand name at a retail registrar “Squarespace Domains II LLC”
Mediumraicestaxfinancialservices.orgscore 32· empty page
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “cloudflare”
Mediumcaufemcip.orgscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumroovelo.orgscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumtuyyocreciendojuntos.orgscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
Mediumonpointsecurity.orgscore 28· active website
lure words (login, verify, secure…) “security”page impersonates a brand “Microsoft 365”
Mediumupoint-id.orgscore 26· active website
lure words (login, verify, secure…) “id”brand in page title, not in the name “steam”
Lowcacvineyardofjoyinternational.orgscore 24· active website
very long name “29”brand in page title, not in the name “namecheap”
Loweservices--iss-gov.orgscore 24· active website
lure words (login, verify, secure…) “gov,service,services”many hyphens “3”
Lowsudaneseamericancommunityassociation.orgscore 24· active website
very long name “36”brand in page title, not in the name “namecheap”
Lowaisniper.orgscore 22· active website
page impersonates a brand “Coinbase”
Lowbagissue.orgscore 22· active website
page impersonates a brand “Binance”

Same data as JSON: /api/zone/risk?day=2026-10-13&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.