Highscore 55 · flagged Thursday, October 22, 2026

rapidinfidelityrecovery.icu

Appeared in the .icu zone on Thursday, October 22, 2026; by the end of that day the census found registrar placeholder. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: fidelity
+14
lure words (login, verify, secure…)
matched: recover,recovery
+32
TLD with a high abuse rate
matched: icu
+8
form on a brand-styled page
matched: has_form
+18
identical page on many newborns
matched: 1560 identical pages
+10
Registrar
—
Nameserver provider
Nameservers
ns1054.ui-dns.biz, ns1064.ui-dns.de, ns1078.ui-dns.org, ns1103.ui-dns.com
First-day state
registrar placeholder
HTTP status
200
Page title
—
Has a form
yes
Brand echoed
fidelity

Model opinions

Second opinionlooks benignconfidence 86%· claude-opus-5-5

The page is the standard IONOS 'Diese Domain ist bereits registriert' placeholder on IONOS ui-dns nameservers, with links to the real ionos.de and only a domain-search form. 'fidelity' is a substring of 'infidelity', and the name reads as relationship-recovery coaching, not brand impersonation.

First passlooks benignconfidence 95%· claude-haiku-4-5

This is a legitimate IONOS registrar placeholder page for a registered domain. The page displays authentic IONOS branding and domain management interface in German, with links to real IONOS services (ionos.de). The form posts to self with IONOS-specific parameters (__SYNT, domaincheckresult), which is standard for IONOS's domain check tool, not a phishing sealed-room pattern. The domain name contains 'fidelity' and 'recovery' words, but the page itself makes no attempt to impersonate any organis

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, October 22, 2026

Screenshot of rapidinfidelityrecovery.icu taken by the zone census on 2026-10-22

Same data as JSON: /api/zone/domain/rapidinfidelityrecovery.icu. This page is not indexed by search engines and does not link to the site it describes.