Observed Signal · Aug 29, 2026 · Product / Service Issue · Source: DEV Community · Impact: 3/5 · Sentiment: Negative
IPQS Flags New .me Domain as Phishing (Score 95)
An author reports that IPQualityScore (IPQS) labeled a newly registered personal .me domain as "phishing" with a 95/100 risk score despite the domain having valid DNS, SPF, DMARC, no malware, no spam, no hosted content, and no traffic rank. The author submitted a correction request roughly a month earlier and received no substantive response as of 2026-08-29. The piece criticizes IPQS for opaque scoring (including a "risky_tld" flag and a displayed Cloudflare IP), the lack of evidence or explanation behind high-risk labels, and an unresponsive appeals process. The article warns that false positives from reputation/fraud-data vendors can disrupt customer onboarding, security workflows, and automated blocking decisions, and outlines recommended accountability and transparency changes for IPQS.
A data-provider accuracy and transparency issue that can affect automated onboarding, fraud decisions, security workflows, and downstream customer experience across businesses using reputation/fraud feeds.
Track IPQS Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your Polaris7 workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- IPQualityScore (IPQS) classified a newly registered .me domain as phishing with a risk score of 95.
- The domain had valid DNS, SPF enabled, DMARC enabled, no detected malware, no detected spam, no hosted content, and no traffic rank.
- The author submitted a correction request and reported receiving no explanation, evidence, ticket update, or human response as of 2026-08-29.
- IPQS markets domain and URL reputation, IP reputation, proxy/VPN detection, email validation, device fingerprinting, and related fraud-risk products and integrations.
- The IPQS report displayed flags such as "risky_tld: true" and a Cloudflare IP address and provided no detailed evidence explaining the phishing classification.
Connected Companies & Entities
8 Entities mapped“The report also displayed a Cloudflare IP address.”
“IPQS promotes integrations with security platforms, fraud tools, threat-intelligence systems, and investigation products.”
“IPQualityScore publicly displays well-known company logos and publishes customer stories and case studies involving multiple businesses.”
“IPQualityScore publicly displays well-known company logos and publishes customer stories and case studies involving multiple businesses.”
“Reviews and online discussions include complaints from people who say IPQualityScore classified legitimate websites or residential IP addres...”
“Reviews and online discussions include complaints from people who say IPQualityScore classified legitimate websites or residential IP addres...”
“IPQualityScore also receives positive reviews on business software platforms.”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
New Domain Flagged as Scam Without Evidence
The author registered a personal domain (timotic.me) intended mainly for email and with minimal website content. Several automated domain-reputation services labeled the domain suspicious or unsafe before it was indexed by search engines. The author contacted each service; some (ScamDoc, WebSafely, Gridinsoft after verification) updated their ratings or corrected listings, while others (ScamAdviser, Scam Detector) did not respond and left severe labels. The piece argues that absence of reputation or recent registration are weak signals that should not be presented as proof of fraud, explains harms to email deliverability and search visibility, and recommends that reputation services separate low-confidence risk estimates from confirmed threats, disclose signals used, offer easy correction processes, and use neutral wording when confidence is low.
MCP Spec Imminent; Email Authentication Is Weakening
The author scanned 671,693 domains (Tranco forward-DNS snapshot 2026-07-25) and reports widespread weaknesses in email authentication as the MCP spec is about to land. Key findings: 634,220 domains publish SPF, 468,749 publish DMARC, but DMARC enforcement fell by 0.42 percentage points last month despite 9,173 net new DMARC domains; a large share of those records are non-enforcing `p=none` or inert (no working `rua=`). Enforcement correlates with prominence: top-1k sites are far more protected than the long tail. Self-hosted MX is the single largest inbound category (22.79%), exceeding Google Workspace and Microsoft 365. The author warns agentic email products amplify risk through concentrated volume, unaudited SPF includes, and missing telemetry, and gives concrete diagnostic commands and remediation steps.
RiskMail.io Launches Intelligent Email Risk Detection
RiskMail.io announced the launch of an intelligent email risk detection platform aimed at helping businesses and individuals identify phishing, fraud, malicious links, spoofed domains and suspicious senders before they become security incidents. The platform analyzes multiple risk indicators and presents fast, easy-to-understand risk reports via a user-friendly web interface. Key capabilities listed include phishing identification, suspicious sender analysis, malicious link assessment, fraud risk evaluation and risk reporting. RiskMail.io positions the product for businesses, SMEs, IT administrators, security teams, remote workers and individual users and plans ongoing improvements to detection accuracy and additional threat analysis features. The article was published by MarTech Series on July 10, 2026.
Receive all future signals for IPQS & competitors in your briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.