Flagged newborn domains, Thursday, October 22, 2026

23 names at tier high or above in .org, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticall-z-d.orgscore 68· active website
page asks for credentials “Sign in to your account”brand in page title, not in the name “lazada”form on a brand-styled page “has_form”

Model opinion: looks like phishing (target: Lazada), confidence 90%. An opinion, not a finding.

Highbuyinstagramlikes.orgscore 55echoes instagram· active website
brand in the name “instagram”free DNS provider “dnsowl.com”brand name and brand-styled page “instagram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highdevwordpress.orgscore 55echoes wordpress· suspended
brand in the name “wordpress”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Hightrurstwallet.orgscore 55echoes trustwallet· registrar placeholder
one-letter brand typo “trurstwallet≈trustwallet”lure words (login, verify, secure…) “wallet”identical page on many newborns “4087 identical pages”

Model opinion: looks like abuse (target: Trust Wallet), confidence 82%. An opinion, not a finding.

Highrevolutionchretienne.orgscore 54echoes revolut· active website
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highagro-finance.orgscore 52echoes binance· active website
one-letter brand typo “finance≈binance”brand name on a rarely-seen nameserver “lytehosting.com”form on a brand-styled page “has_form”

Model opinion: looks like a scam, confidence 90%. An opinion, not a finding.

Highpechat.orgscore 52echoes wechat· boilerplate page
one-letter brand typo “pechat≈wechat”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “150 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highuniverseven7outlook.orgscore 52echoes outlook· active website
brand in the name “outlook”brand plus digits “universeven7outlook”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.

Highopenairreader.orgscore 50echoes openai· no DNS
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highpurplebay.orgscore 50echoes ebay· not probed yet
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highripplemagicrevolution.orgscore 48echoes revolut· other
brand in the name “revolut”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “cloudflare”

Model opinion: unreachable when judged, confidence 95%. An opinion, not a finding.

Highusa-abundance.orgscore 48echoes usaa· parked, for sale
brand in the name “usaa”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “4045 identical pages”

Model opinion: looks benign, confidence 48%. An opinion, not a finding.

Highbestbuyers.orgscore 46echoes bestbuy· parked, for sale
brand in the name “bestbuy”brand name at a retail registrar “DropCatch.com 1038 LLC”brand name redirects elsewhere “atom.com”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highoutlook71.orgscore 46echoes outlook· active website
brand in the name “outlook”brand plus digits “outlook71”brand name at a retail registrar “Alantron Inc.”

Model opinion: looks benign, confidence 58%. An opinion, not a finding.

Highrevolution2026.orgscore 46echoes revolut· empty page
brand in the name “revolut”brand plus digits “revolution2026”brand name at a retail registrar “Tucows Domains Inc.”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfidelityexpresss.orgscore 44echoes fidelity· no DNS
brand in the name “fidelity”brand name on a rarely-seen nameserver “prepaid-host.com”brand name at a retail registrar “InterNetX GmbH”
Highgmailpro.orgscore 44echoes gmail· not probed yet
brand in the name “gmail”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Hightechvanguard.orgscore 44echoes vanguard· no DNS
brand in the name “vanguard”brand name on a rarely-seen nameserver “catched.com”brand name at a retail registrar “Edomains LLC”
Highbuytiktokviews.orgscore 43echoes tiktok· active website
brand in the name “tiktok”brand name on a rarely-seen nameserver “eranet-dns.com”brand name at a retail registrar “Eranet International Limited”brand name and brand-styled page “tiktok”

Model opinion: looks benign, confidence 70%. An opinion, not a finding.

Highbmo-finance.orgscore 42echoes binance· active website
one-letter brand typo “finance≈binance”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highcarrera-finance.orgscore 42echoes binance· robots.txt denied
one-letter brand typo “finance≈binance”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highcludflare.orgscore 42echoes cloudflare· empty page
one-letter brand typo “cludflare≈cloudflare”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Name.com, Inc.”

Model opinion: looks like abuse (target: Cloudflare), confidence 72%. An opinion, not a finding.

Highsignature-email.orgscore 42· active website
page impersonates a brand “Office 365”brand in page title, not in the name “apple”

Same data as JSON: /api/zone/risk?day=2026-10-22&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.