Flagged newborn domains, Thursday, October 15, 2026

164 names at tier low or above in .info, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highbarclaystaxpayment.infoscore 55echoes barclays· no DNS
brand in the name “barclays”lure words (login, verify, secure…) “payment”
Highcibc-securityaccess.infoscore 55echoes cibc· boilerplate page
brand in the name “cibc”lure words (login, verify, secure…) “access,security”identical page on many newborns “47 identical pages”

Model opinion: looks like abuse (target: CIBC), confidence 80%. An opinion, not a finding.

Highfreecashapp.infoscore 55echoes cashapp· registrar placeholder
brand in the name “cashapp”form on a brand-styled page “has_form”identical page on many newborns “1411 identical pages”

Model opinion: looks like abuse (target: Cash App), confidence 70%. An opinion, not a finding.

Highportalsafeguardcibc.infoscore 55echoes cibc· boilerplate page
brand in the name “cibc”lure words (login, verify, secure…) “portal”identical page on many newborns “47 identical pages”

Model opinion: looks like abuse (target: CIBC), confidence 86%. An opinion, not a finding.

Hightracker-icloud.infoscore 55echoes icloud· robots.txt denied
brand in the name “icloud”lure words (login, verify, secure…) “track”brand name behind Cloudflare “cloudflare.com”
Highsuscripcion-neflix.infoscore 54echoes netflix· blocked the probe
one-letter brand typo “neflix≈netflix”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Highbroadwaymeetsthebayou.infoscore 50echoes ebay· registrar placeholder
brand in the name “ebay”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1411 identical pages”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highmobile-under6r.infoscore 50echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand plus digits “mobile-under6r”brand name at a retail registrar “GNAME.COM PTE. LTD.”brand name at a watch-list registrar “GNAME.COM PTE. LTD.”
Highobjektpflege-bayern.infoscore 50echoes ebay· registrar placeholder
brand in the name “ebay”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1411 identical pages”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highcloud-finds.infoscore 48echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highslackline-coach.infoscore 48echoes slack· boilerplate page
brand in the name “slack”brand name at a retail registrar “RegistryGate GmbH”identical page on many newborns “26 identical pages”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highslacklinecoach.infoscore 48echoes slack· boilerplate page
brand in the name “slack”brand name at a retail registrar “RegistryGate GmbH”identical page on many newborns “26 identical pages”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highaproxitautomationpro.infoscore 46echoes itau· suspended
brand in the name “itau”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highmyexecutecostco1989.infoscore 46echoes costco· boilerplate page
brand in the name “costco”brand plus digits “myexecutecostco1989”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more
Highcommeunefidelity.infoscore 44echoes fidelity· not probed yet
brand in the name “fidelity”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highgoogletop.infoscore 44echoes google· boilerplate page
brand in the name “google”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highprimebay.infoscore 44echoes ebay· not probed yet
brand in the name “ebay”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Medium18878-b.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-c.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-i.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-o.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-u.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-v.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-z.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumamazonrecruitment.infoscore 38echoes amazon· no web server
brand in the name “amazon”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumchat666.infoscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumcoinbase-cloud.infoscore 38echoes coinbase· no DNS
brand in the name “coinbase”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumdone-activate.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumfidelitystandardlife.infoscore 38echoes fidelity· excluded
brand in the name “fidelity”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumfotomoment.infoscore 38· blocked the probe
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Mediumgoogleprobably.infoscore 38echoes google· excluded
brand in the name “google”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumgraphics-cards.infoscore 38· redirects elsewhere
brand in page title, not in the name “nvidia”form on a brand-styled page “has_form”
Mediumhidrel.infoscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumjohnsoncityyoga.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediummoidomonline.infoscore 38· blocked the probe
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Mediummradomski.infoscore 38· redirects elsewhere
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Mediumtornadopursuit.infoscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumupraise.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumamazoo.infoscore 36echoes amazon· no DNS
one-letter brand typo “amazoo≈amazon”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediumproathleteoutfitters.infoscore 30· active website
page asks for credentials “log in to your account”
Mediumpriroutecargo.infoscore 28· active website
page impersonates a brand “DHL”form submits over plain HTTP “http://priroutecargo.info/”
Mediumtechnicaltranslations.infoscore 25· no DNS
nameserver domain born the same day “tech-translations.info”
very long name “41”brand in page title, not in the name “cloudflare”
Lowxn--luck-auto-mobilit-17-r2b.infoscore 24· registrar placeholder
punycode name “luck-auto-mobilité-17 scripts=LATIN”many hyphens “3”
Lowmannlichelibido.infoscore 22· active website
page impersonates a brand “DHL”
Lowneuemannerkraf.infoscore 22· active website
page impersonates a brand “DHL”
Lowpbsin18.infoscore 22· active website
page impersonates a brand “PayPal”
Lowtrajectoire.infoscore 22· active website
page impersonates a brand “FedEx”
Low21cinema.infoscore 20· active website
brand in page title, not in the name “wordpress”
Low789mr.infoscore 20· active website
brand in page title, not in the name “wordpress”

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.