Flagged newborn domains, Friday, August 28, 2026

28 names at tier medium or above in .info, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalstripedmailbox.infoscore 68echoes stripe· active website
brand in the namestripebrand name behind Cloudflarecloudflare.combrand name at a retail registrarSav.com, LLCbrand name at a watch-list registrarSav.com, LLC+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highcanadapost-newdeliverydate.infoscore 55echoes canadapost· empty page
brand in the namecanadapostlure words (login, verify, secure…)deliverybrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED

Model opinion: looks like phishing (target: Canada Post), confidence 70%. An opinion, not a finding.

Highmailchimps.infoscore 50echoes mailchimp· blocked the probe
brand in the namemailchimpbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highkiebay.infoscore 44echoes ebay· no web server
brand in the nameebaybrand name on a rarely-seen nameservertridomainhost.combrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Mediumassetwealthplanning.infoscore 38· active website
brand in page title, not in the nameledgerform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 65%. An opinion, not a finding.

Mediumbetwager.infoscore 38· active website
brand in page title, not in the nameinstagramform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Mediumbluewin8888.infoscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Mediumbuyviagraonline.infoscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Mediumdavidbourdenet.infoscore 38· active website
brand in page title, not in the nameuberform on a brand-styled pagehas_form
Mediumfinancialobserverdaily.infoscore 38· active website
brand in page title, not in the namespectrumform on a brand-styled pagehas_form
Mediumfrogflix.infoscore 38· redirects elsewhere
brand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Mediumg317.infoscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumnepalflood.infoscore 38· active website
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumnextrole.infoscore 38· active website
brand in page title, not in the nametelegramform on a brand-styled pagehas_form
Mediumpedidorespondido.infoscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumpropiska-registratsiya.infoscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumregistratsiya-sobstvennik.infoscore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumrubijvern.infoscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumtodddeannetflix.infoscore 38echoes netflix· not probed yet
brand in the namenetflixbrand name at a retail registrarGoDaddy.com, LLC
Mediumussyads.infoscore 38· active website
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumvicafe.infoscore 38· active website
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumsciontech-cloud.infoscore 36echoes icloud· empty page
one-letter brand typocloud≈icloudbrand name at a retail registrarPDR Ltd. d/b/a PublicDomainRegistry.com
Mediumlog-to-portal-home.infoscore 32· blocked the probe
lure words (login, verify, secure…)portalmany hyphens3brand in page title, not in the namecloudflare
Mediummycurriculum.infoscore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns96 identical pages
Mediumbonusripple.infoscore 26· blocked the probe
lure words (login, verify, secure…)bonusbrand in page title, not in the namecloudflare
Mediumdelivery-shipswiss.infoscore 26· blocked the probe
lure words (login, verify, secure…)deliverybrand in page title, not in the namecloudflare
Mediumkurwa-bonusn.infoscore 26· blocked the probe
lure words (login, verify, secure…)bonusbrand in page title, not in the namecloudflare
Mediumtiktkaccount.infoscore 26· active website
lure words (login, verify, secure…)accountbrand in page title, not in the nametiktok

Same data as JSON: /api/zone/risk?day=2026-08-28&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.