Flagged newborn domains, Saturday, October 10, 2026

30 names at tier medium or above in .info, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalruberti.infoscore 60· active website
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highsecuritycoinbase.infoscore 55echoes coinbase· no DNS
brand in the name “coinbase”lure words (login, verify, secure…) “security”brand name on a rarely-seen nameserver “alexhost.com”
Highverify-linkedin.infoscore 55echoes linkedin· no web server
brand in the name “linkedin”lure words (login, verify, secure…) “verify”
Highdigitaldocumentsfidelityfiles.infoscore 54echoes fidelity· registrar placeholder
brand in the name “fidelity”very long name “29”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”+1 more

Model opinion: looks like abuse (target: Fidelity), confidence 60%. An opinion, not a finding.

Highfccbrbhsbc.infoscore 50echoes hsbc· no DNS
brand in the name “hsbc”brand name on a rarely-seen nameserver “edgedns.ru”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highmarketingoutlook.infoscore 50echoes outlook· not probed yet
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highwattcomponents.infoscore 50echoes attcom· registrar placeholder
brand in the name “attcom”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1268 identical pages”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highintuitivelifecoachingschool.infoscore 48echoes intuit· boilerplate page
brand in the name “intuit”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “2246 identical pages”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highstarlinkpiphone.infoscore 48echoes starlink· parked with ads
brand in the name “starlink”brand name at a retail registrar “IONOS SE”identical page on many newborns “82 identical pages”

Model opinion: looks like abuse (target: Starlink), confidence 60%. An opinion, not a finding.

Highget-light-cloud.infoscore 46echoes icloud· boilerplate page
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Name.com, Inc.”identical page on many newborns “96 identical pages”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highiinkedin.infoscore 46echoes linkedin· boilerplate page
one-letter brand typo “iinkedin≈linkedin”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “2246 identical pages”

Model opinion: looks like abuse (target: LinkedIn), confidence 85%. An opinion, not a finding.

Highi-cloud-f.infoscore 44echoes icloud· robots.txt denied
brand in the name “icloud”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highpaypal-pruefung.infoscore 44echoes paypal· no web server
brand in the name “paypal”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Highrobinhoodresort.infoscore 44echoes robinhood· no web server
brand in the name “robinhood”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Mediumberkaykocabiyik.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumgrandpashabetguncel.infoscore 38· blocked the probe
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumiconhealthgroup.infoscore 38· redirects elsewhere
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Mediumiconhealthteam.infoscore 38· redirects elsewhere
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Mediumiknowradio.infoscore 38· redirects elsewhere
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumintuitivelifecoachschool.infoscore 38echoes intuit· excluded
brand in the name “intuit”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumomatsivutif.infoscore 38· blocked the probe
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumprinceprice.infoscore 38· active website
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Mediumpsychlab.infoscore 38· redirects elsewhere
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumrebellreinigung.infoscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumsundayfunday.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumaravex.infoscore 36echoes aramex· excluded
one-letter brand typo “aravex≈aramex”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumleder-arbeiten.infoscore 36echoes ledger· active website
one-letter brand typo “leder≈ledger”brand name at a retail registrar “IONOS SE”
Mediumjogodavidadopublicitario.infoscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “94 identical pages”
Mediummarutiintl.infoscore 30· registrar placeholder
brand in page title, not in the name “hostinger”identical page on many newborns “94 identical pages”
Mediummaxslotszerkalo-official.infoscore 26· blocked the probe
lure words (login, verify, secure…) “official”brand in page title, not in the name “cloudflare”

Same data as JSON: /api/zone/risk?day=2026-10-10&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.