Flagged newborn domains, Monday, August 31, 2026

27 names at tier medium or above in .info, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalermesssop.infoscore 68· active website
page asks for credentialsLog In to Your Accountbrand in page title, not in the namesharepointform on a brand-styled pagehas_form

Model opinion: looks like phishing (target: Microsoft SharePoint), confidence 96%. An opinion, not a finding.

Highicloudtrack-ip.infoscore 55echoes icloud· robots.txt denied
brand in the nameicloudlure words (login, verify, secure…)trackbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSav.com, LLC+1 more
Highnetflix-mitglied.infoscore 55echoes netflix· blocked the probe
brand in the namenetflixbrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameSilo, LLCbrand name at a watch-list registrarNameSilo, LLC+1 more
Hightax-portal.infoscore 50· blocked the probe
lure words (login, verify, secure…)portal,taxbrand in page title, not in the namecloudflareform on a brand-styled pagehas_form
Highcloud-token.infoscore 48echoes icloud· active website
one-letter brand typocloud≈icloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Incbrand name at a watch-list registrarDynadot Inc

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highdreamhireaicloud.infoscore 44echoes icloud· not probed yet
brand in the nameicloudbrand name at a retail registrarPorkbun LLCbrand name at a watch-list registrarPorkbun LLC
Highdoc-sign.infoscore 42echoes docusign· no DNS
one-letter brand typodocsign≈docusignbrand name at a retail registrarNICENIC INTERNATIONAL GROUP CO., LIMITEDbrand name at a watch-list registrarNICENIC INTERNATIONAL GROUP CO., LIMITED
Mediumbusinessoutlook.infoscore 38echoes outlook· no DNS
brand in the nameoutlookbrand name at a retail registrarTucows Domains Inc.
Mediumdoublingup.infoscore 38· redirects elsewhere
brand in page title, not in the nametiktokform on a brand-styled pagehas_form
Mediumgetkarpa.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumjoinkarpa.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumkarpa.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumkarpadirect.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumkarpahealth.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumkarpahq.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumkarpapartners.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumkarpasolutions.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumkarpateam.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumkarpatech.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediummailzone.infoscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumrevolutiondumpster.infoscore 38echoes revolut· no web server
brand in the namerevolutbrand name at a retail registrarGoDaddy.com, LLC
Mediumtrykarpa.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediumutilitybillingservices.infoscore 38· other
lure words (login, verify, secure…)billing,service,servicesbrand in page title, not in the namecloudflare
Mediumvifome.infoscore 38· active website
brand in page title, not in the namespectrumform on a brand-styled pagehas_form
Mediumwcky.infoscore 38· redirects elsewhere
brand in page title, not in the namegoogleform on a brand-styled pagehas_form
Mediumwithkarpa.infoscore 38· redirects elsewhere
brand in page title, not in the namenationwideform on a brand-styled pagehas_form
Mediummyassessmentverification.infoscore 26· blocked the probe
lure words (login, verify, secure…)verificationbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-08-31&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.