Flagged newborn domains, Tuesday, October 13, 2026

24 names at tier medium or above in .info, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highcoveragebay.infoscore 55echoes ebay· registrar placeholder
brand in the name “ebay”form on a brand-styled page “has_form”identical page on many newborns “1585 identical pages”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highfinance-cogedim.infoscore 55echoes binance· registrar placeholder
one-letter brand typo “finance≈binance”form on a brand-styled page “has_form”identical page on many newborns “1585 identical pages”

Model opinion: looks like abuse (target: Cogedim), confidence 68%. An opinion, not a finding.

Highfrometsy.infoscore 55echoes etsy· redirects elsewhere
brand in the name “etsy”brand in page title, not in the name “ebay”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highportal-microsofl.infoscore 55echoes microsoft· registrar placeholder
one-letter brand typo “microsofl≈microsoft”lure words (login, verify, secure…) “portal”form on a brand-styled page “has_form”identical page on many newborns “1585 identical pages”

Model opinion: looks like abuse (target: Microsoft), confidence 80%. An opinion, not a finding.

Hightheintuitiveartist.infoscore 55echoes intuit· redirects elsewhere
brand in the name “intuit”brand name at a retail registrar “GoDaddy.com, LLC”brand in page title, not in the name “zoom”form on a brand-styled page “has_form”+1 more

Model opinion: looks benign, confidence 93%. An opinion, not a finding.

Highkraken-vk17at.infoscore 52echoes kraken· active website
brand in the name “kraken”brand plus digits “kraken-vk17at”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: looks like abuse (target: Kraken), confidence 80%. An opinion, not a finding.

Highicloud-rest.infoscore 50echoes icloud· no DNS
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Highnetflixsp.infoscore 50echoes netflix· empty page
brand in the name “netflix”brand name on a rarely-seen nameserver “69host.cc”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”

Model opinion: looks like abuse (target: Netflix), confidence 80%. An opinion, not a finding.

Highwattmobile.infoscore 48echoes tmobile· registrar placeholder
brand in the name “tmobile”brand name at a retail registrar “InterNetX GmbH”identical page on many newborns “250 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highplantom.infoscore 46echoes phantom· registrar placeholder
one-letter brand typo “plantom≈phantom”brand name at a retail registrar “InterNetX GmbH”identical page on many newborns “250 identical pages”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Hightrust-wallet.infoscore 44echoes trustwallet· no DNS
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “Name.com, Inc.”
Highvericon.infoscore 44echoes verizon· blocked the probe
one-letter brand typo “vericon≈verizon”brand name at a retail registrar “Domain Science Kutatási Szolgáltató Korl”brand name redirects elsewhere “expireddomains.com”
Highboxrituelsintuitifs.infoscore 42echoes intuit· other
brand in the name “intuit”brand name at a retail registrar “IONOS SE”brand in page title, not in the name “cloudflare”

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highfinance-community.infoscore 42echoes binance· not probed yet
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
Highgewinnbuch.infoscore 42· active website
page impersonates a brand “DHL”brand in page title, not in the name “ebay”

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highxn--cinbase-90a.infoscore 42echoes coinbase· active website
punycode name “cöinbase scripts=LATIN”brand in the name “coinbase”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”

Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.

Mediumanwaltskanzlei-reputation.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumanwaltskanzlei-sindros.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumdeutsche-ware-it.infoscore 38· blocked the probe
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Mediumdwellingprimeline.infoscore 38· active website
brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Mediumnvidiasecuritieslitigation.infoscore 38echoes nvidia· redirects elsewhere
brand in the name “nvidia”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumsoulgamesstudio.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediummercotur-health-finance.infoscore 36echoes binance· active website
one-letter brand typo “finance≈binance”brand name at a retail registrar “IONOS SE”
Mediumrecoverwellnow.infoscore 26· other
lure words (login, verify, secure…) “recover”brand in page title, not in the name “cloudflare”

Same data as JSON: /api/zone/risk?day=2026-10-13&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.