Criticalscore 62 · flagged Wednesday, September 16, 2026

santanderplaygorund.org

Appeared in the .org zone on Wednesday, September 16, 2026; by the end of that day the census found active website about hosting & domains. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: santander
+30
brand name at a retail registrar
matched: Arsys Internet, S.L. dba NICLINE.COM
+8
form on a brand-styled page
matched: has_form
+18
form submits over plain HTTP
matched: http://santanderplaygorund.org/
+6
Registrar
Arsys Internet, S.L. dba NICLINE.COM
Nameserver provider
Nameservers
dns97.servidoresdns.net, dns98.servidoresdns.net
First-day state
active website
HTTP status
200
Page title
santanderplaygorund.org
Has a form
yes
Brand echoed
santander

Model opinions

Second opinionsuspiciousconfidence 50%· claude-opus-5

The page is simply the default Arsys hosting placeholder ('Esta es la página de: santanderplaygorund.org') with a domain-search form posting to www.arsys.es — no bank branding, no credential capture, so the scorer's 'form-on-brand-page' signal is a false positive. The name is a misspelling ('playgorund') of a possible Santander property, which is ambiguous between a brand-owner defensive registration via a Spanish retail registrar and a squat awaiting content; no deceptive content is present yet

First passlooks benignconfidence 95%· claude-haiku-4-5

This is a hosting-provider placeholder page from Arsys Internet (the registrar). The page displays standard domain-parking content offering web services (hosting, SSL, email, etc.) and contains no attempt to impersonate Santander Bank or any other organisation. The form present ('BUSCA TU DOMINIO') is a legitimate domain-search tool, not a credential-harvesting phish. The domain name contains 'santander' but the page makes no false claim to be Santander Bank.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Wednesday, September 16, 2026

Screenshot of santanderplaygorund.org taken by the zone census on 2026-09-16

Same data as JSON: /api/zone/domain/santanderplaygorund.org. This page is not indexed by search engines and does not link to the site it describes.