Flagged newborn domains, Saturday, August 29, 2026

76 names at tier low or above in .cfd, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highclaude-anthropic.cfdscore 52echoes anthropic· active website
brand in the nameanthropicTLD with a high abuse ratecfdbrand name on a rarely-seen nameservercnmsn.combrand name at a retail registrarCNOBIN INFORMATION TECHNOLOGY LIMITED

Model opinion: looks like phishing (target: Anthropic (Claude)), confidence 97%. An opinion, not a finding.

High1ch34cklim474247864.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highapexcrown.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highhelixwave.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the nameappleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highid45892524.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highid9458215.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highmysticore.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the nameappleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 62%. An opinion, not a finding.

Highstellarvexcore.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Mediumbeamlunar.cfdscore 28· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the nametelegram
Mediumdalen8n.cfdscore 28· server error
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumgarcada.cfdscore 28· empty page
TLD with a high abuse ratecfdbrand in page title, not in the nametelegram
Mediumgentlecomet.cfdscore 28· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the nametelegram
Mediuminternetgobrrr.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumkryonexcapital.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumnovalyxcapital.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumsistemas.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumwaitwhat.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumzenithraxsystems.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Lowrefundsmoney.cfdscore 20· boilerplate page
lure words (login, verify, secure…)refund,refundsTLD with a high abuse ratecfd
Lowservice-sicher24.cfdscore 20· server error
lure words (login, verify, secure…)service,servicesTLD with a high abuse ratecfd
Lowcreatormonetizationsupportresponse.cfdscore 18· no web server
lure words (login, verify, secure…)supportvery long name34TLD with a high abuse ratecfd
lure words (login, verify, secure…)bonusvery long name31TLD with a high abuse ratecfd
Lowdldkdjd98-kdkd98-kdjdnjd-owidd.cfdscore 18· empty page
many hyphens3very long name30TLD with a high abuse ratecfd
Lowaceaspark.cfdscore 16· redirects elsewhere
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowacevaspark.cfdscore 16· redirects elsewhere
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowacevpark.cfdscore 16· boilerplate page
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowacxvpark.cfdscore 16· boilerplate page
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowaroffice.cfdscore 16· robots.txt denied
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowjykmshop.cfdscore 16· robots.txt denied
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowruanluyou001.cfdscore 16· boilerplate page
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowsportylive.cfdscore 16· active website
TLD with a high abuse ratecfdfree DNS providerafraid.org
Lowwocaonima.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowxckj-group.cfdscore 16· robots.txt denied
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowxialiannai.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowauthtrumpswallet.cfdscore 14· no web server
lure words (login, verify, secure…)walletTLD with a high abuse ratecfd
Lowdatenservice24.cfdscore 14· server error
lure words (login, verify, secure…)serviceTLD with a high abuse ratecfd
Lowdenemebonuscularic2-kara.cfdscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusucv-zeus.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusudz-zeus.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusuxn-zeus.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusuxt-zeus.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusuzeus.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusuzz-zeus.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdnmbonuszeusda.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowextrabet-bonus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowforesmarttrade.cfdscore 14· active website
TLD with a high abuse ratecfdform submits over plain HTTPhttp://foresmarttrade.cfd/brand/
Lowgrandpashabetvipbonus.cfdscore 14· server error
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowid-gate824.cfdscore 14· no web server
lure words (login, verify, secure…)idTLD with a high abuse ratecfd
Lowjetztbonus.cfdscore 14· registrar placeholder
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Loworbittrack.cfdscore 14· empty page
lure words (login, verify, secure…)trackTLD with a high abuse ratecfd

Same data as JSON: /api/zone/risk?day=2026-08-29&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.