Flagged newborn domains, Thursday, October 15, 2026

42 names at tier medium or above in .info, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highbarclaystaxpayment.infoscore 55echoes barclays· no DNS
brand in the name “barclays”lure words (login, verify, secure…) “payment”
Highcibc-securityaccess.infoscore 55echoes cibc· boilerplate page
brand in the name “cibc”lure words (login, verify, secure…) “access,security”identical page on many newborns “47 identical pages”

Model opinion: looks like abuse (target: CIBC), confidence 80%. An opinion, not a finding.

Highfreecashapp.infoscore 55echoes cashapp· registrar placeholder
brand in the name “cashapp”form on a brand-styled page “has_form”identical page on many newborns “1411 identical pages”

Model opinion: looks like abuse (target: Cash App), confidence 70%. An opinion, not a finding.

Highportalsafeguardcibc.infoscore 55echoes cibc· boilerplate page
brand in the name “cibc”lure words (login, verify, secure…) “portal”identical page on many newborns “47 identical pages”

Model opinion: looks like abuse (target: CIBC), confidence 86%. An opinion, not a finding.

Hightracker-icloud.infoscore 55echoes icloud· robots.txt denied
brand in the name “icloud”lure words (login, verify, secure…) “track”brand name behind Cloudflare “cloudflare.com”
Highsuscripcion-neflix.infoscore 54echoes netflix· blocked the probe
one-letter brand typo “neflix≈netflix”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Highbroadwaymeetsthebayou.infoscore 50echoes ebay· registrar placeholder
brand in the name “ebay”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1411 identical pages”

Model opinion: looks benign, confidence 68%. An opinion, not a finding.

Highmobile-under6r.infoscore 50echoes tmobile· no DNS
one-letter brand typo “mobile≈tmobile”brand plus digits “mobile-under6r”brand name at a retail registrar “GNAME.COM PTE. LTD.”brand name at a watch-list registrar “GNAME.COM PTE. LTD.”
Highobjektpflege-bayern.infoscore 50echoes ebay· registrar placeholder
brand in the name “ebay”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1411 identical pages”

Model opinion: looks benign, confidence 47%. An opinion, not a finding.

Highcloud-finds.infoscore 48echoes icloud· no DNS
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highslackline-coach.infoscore 48echoes slack· boilerplate page
brand in the name “slack”brand name at a retail registrar “RegistryGate GmbH”identical page on many newborns “26 identical pages”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highslacklinecoach.infoscore 48echoes slack· boilerplate page
brand in the name “slack”brand name at a retail registrar “RegistryGate GmbH”identical page on many newborns “26 identical pages”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highaproxitautomationpro.infoscore 46echoes itau· suspended
brand in the name “itau”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 63%. An opinion, not a finding.

Highmyexecutecostco1989.infoscore 46echoes costco· boilerplate page
brand in the name “costco”brand plus digits “myexecutecostco1989”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more
Highcommeunefidelity.infoscore 44echoes fidelity· not probed yet
brand in the name “fidelity”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Highgoogletop.infoscore 44echoes google· boilerplate page
brand in the name “google”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highprimebay.infoscore 44echoes ebay· not probed yet
brand in the name “ebay”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Medium18878-b.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-c.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-i.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-o.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-u.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-v.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Medium18878-z.infoscore 38· active website
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Mediumamazonrecruitment.infoscore 38echoes amazon· no web server
brand in the name “amazon”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumchat666.infoscore 38· active website
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumcoinbase-cloud.infoscore 38echoes coinbase· no DNS
brand in the name “coinbase”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Mediumdone-activate.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumfidelitystandardlife.infoscore 38echoes fidelity· excluded
brand in the name “fidelity”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumfotomoment.infoscore 38· blocked the probe
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Mediumgoogleprobably.infoscore 38echoes google· excluded
brand in the name “google”brand name at a retail registrar “GoDaddy.com, LLC”
Mediumgraphics-cards.infoscore 38· redirects elsewhere
brand in page title, not in the name “nvidia”form on a brand-styled page “has_form”
Mediumhidrel.infoscore 38· active website
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumjohnsoncityyoga.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediummoidomonline.infoscore 38· blocked the probe
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Mediummradomski.infoscore 38· redirects elsewhere
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Mediumtornadopursuit.infoscore 38· redirects elsewhere
brand in page title, not in the name “chase”form on a brand-styled page “has_form”
Mediumupraise.infoscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumamazoo.infoscore 36echoes amazon· no DNS
one-letter brand typo “amazoo≈amazon”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Mediumproathleteoutfitters.infoscore 30· active website
page asks for credentials “log in to your account”
Mediumpriroutecargo.infoscore 28· active website
page impersonates a brand “DHL”form submits over plain HTTP “http://priroutecargo.info/”
Mediumtechnicaltranslations.infoscore 25· no DNS
nameserver domain born the same day “tech-translations.info”

Same data as JSON: /api/zone/risk?day=2026-10-15&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.