Flagged newborn domains, Saturday, October 17, 2026

115 names at tier medium or above in .org, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalspin-and-go-mobile-laundry-services.orgscore 88echoes tmobile· active website
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “service,services”many hyphens “5”very long name “35”+1 more

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highbigdrago.orgscore 56· active website
page impersonates a brand “PayPal”page pushes urgent payment “Claim Your Bonus”brand in page title, not in the name “paypal”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highxn--jao-nz-eua.orgscore 56· active website
punycode name “jao-änz scripts=LATIN”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highbinancegm.orgscore 55echoes binance· blocked the probe
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Highcoinbase-wallets.orgscore 55echoes coinbase· robots.txt denied
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”
Highgmailreportservice.orgscore 55echoes gmail· no DNS
brand in the name “gmail”lure words (login, verify, secure…) “service”brand name behind Cloudflare “cloudflare.com”
Highbbinance.orgscore 54echoes binance· parked, for sale
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “518 identical pages”brand name redirects elsewhere “urldance.com”

Model opinion: looks like abuse (target: Binance), confidence 80%. An opinion, not a finding.

Highimamivanguard.orgscore 54echoes vanguard· registrar placeholder
brand in the name “vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3510 identical pages”
Highsparkassenstiftung-caucasus.orgscore 54echoes sparkasse· boilerplate page
brand in the name “sparkasse”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1737 identical pages”

Model opinion: looks benign, confidence 72%. An opinion, not a finding.

Hightwili.orgscore 54echoes twilio· active website
one-letter brand typo “twili≈twilio”brand name at a retail registrar “Amazon Registrar, Inc.”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highbinancegs.orgscore 50echoes binance· no DNS
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highrevolution-ch.orgscore 50echoes revolut· active website
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highaccesssilverliningrealestate.orgscore 48· redirects elsewhere
lure words (login, verify, secure…) “access”very long name “28”brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highaccesssilverliningrealtygroup.orgscore 48· redirects elsewhere
lure words (login, verify, secure…) “access”very long name “29”brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highamazoncentre.orgscore 48echoes amazon· boilerplate page
brand in the name “amazon”brand name at a retail registrar “IONOS SE”identical page on many newborns “93 identical pages”

Model opinion: suspicious (target: Amazon), confidence 55%. An opinion, not a finding.

Highverizonhr.orgscore 48echoes verizon· boilerplate page
brand in the name “verizon”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3273 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highartcraftadobe.orgscore 44echoes adobe· no DNS
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highbwelani.orgscore 44· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”form submits over plain HTTP “https://www.bwelani.org/”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfixbet-official.orgscore 44· blocked the probe
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highopenairtheologyconference.orgscore 44echoes openai· placeholder page
brand in the name “openai”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”

Model opinion: suspicious (target: OpenAI), confidence 65%. An opinion, not a finding.

Highsor777official.orgscore 44· active website
lure words (login, verify, secure…) “official”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Higherpedia.orgscore 42echoes expedia· no DNS
one-letter brand typo “erpedia≈expedia”brand name on a rarely-seen nameserver “shockhosting.com”brand name at a retail registrar “Squarespace Domains LLC”
Highfirstsilverliningrealtygroup.orgscore 42· redirects elsewhere
very long name “28”brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highhousesilverliningrealtygroup.orgscore 42· redirects elsewhere
very long name “28”brand in page title, not in the name “chase”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highproject-global-consciousness.orgscore 42· active website
very long name “28”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Highsilverliningrealestateconnect.orgscore 42· redirects elsewhere
very long name “29”brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumadobemuse.orgscore 38echoes adobe· empty page
brand in the name “adobe”brand name at a retail registrar “Tucows Domains Inc.”
Mediumal-anonstore.orgscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumalphabestbuy.orgscore 38echoes bestbuy· boilerplate page
brand in the name “bestbuy”brand name at a retail registrar “IONOS SE”
Mediumatlantacarrentals.orgscore 38· active website
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Mediumautojessica.orgscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumbermudaisanotherworld.orgscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumbravocon.orgscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumchinastay.orgscore 38· active website
brand in page title, not in the name “alipay”form on a brand-styled page “has_form”
Mediumcoastalretro.orgscore 38· redirects elsewhere
brand in page title, not in the name “facebook”form on a brand-styled page “has_form”
Mediumdonavia.orgscore 38· active website
brand in page title, not in the name “stripe”form on a brand-styled page “has_form”
Mediumfichesaces.orgscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumfindsilverliningrealestate.orgscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumfindsilverliningrealty.orgscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumfindsilverliningrealtygroup.orgscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumfirearmsalmanac.orgscore 38· redirects elsewhere
brand in page title, not in the name “ledger”form on a brand-styled page “has_form”
Mediumfirstsilverliningrealestate.orgscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumgetsilverliningrealestate.orgscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumgetsilverliningrealty.orgscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumgooglewix.orgscore 38echoes google· excluded
brand in the name “google”brand name at a retail registrar “Tucows Domains Inc.”
Mediumhealingfrontlineheroes.orgscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumhomesilverliningrealtygroup.orgscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumhousesilverliningrealestate.orgscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumhytechcomputersystems.orgscore 38· active website
brand in page title, not in the name “salesforce”form on a brand-styled page “has_form”
Mediumkaren-c-hardinggmail.orgscore 38echoes gmail· excluded
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com, LLC”

Same data as JSON: /api/zone/risk?day=2026-10-17&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.