Criticalscore 82 · flagged Monday, November 9, 2026

onre-finance.cfd

Appeared in the .cfd zone on Monday, November 9, 2026; by the end of that day the census found active website about news media. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: finance≈binance
+28
TLD with a high abuse rate
matched: cfd
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
page impersonates a brand
matched: Binance
+22
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
ali.ns.cloudflare.com, razvan.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Digital assets, networks & tokenised finance | OnRe News
Has a form
yes
Brand echoed
binance

Model opinions

Second opinionlooks like abusetarget: OnReconfidence 60%· claude-opus-5-5

The name copies OnRe Finance's real domain (onre.finance) onto a cheap .cfd TLD, and the page is an unofficial 'OnRe News' crypto-news template that features OnRe heavily, which fits a brand-squat or lure precursor. There is no credential capture: the only forms are self-posting search boxes, and the 'Binance' hit is a false positive from the dictionary word 'finance' plus a news headline.

First passlooks benignconfidence 85%· claude-haiku-4-5

The page is OnRe News, a legitimate independent news publication about digital assets and blockchain. While the domain name 'onre-finance.cfd' contains 'finance' (phonetically similar to 'Binance'), the page itself is branded as 'OnRe News' with its own distinct identity, logo, and editorial content. The scorer flagged 'Binance' as impersonation, but this appears to be a false positive: Binance is mentioned only as a news subject ("Binance adds HYPE and APT..."), not as the site's identity. The

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, November 9, 2026

Screenshot of onre-finance.cfd taken by the zone census on 2026-11-09

Same data as JSON: /api/zone/domain/onre-finance.cfd. This page is not indexed by search engines and does not link to the site it describes.