Flagged newborn domains, Sunday, August 30, 2026

54 names at tier low or above in .cfd, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highprocess-unlock-your-profile.cfdscore 55· redirects elsewhere
lure words (login, verify, secure…)unlockmany hyphens3TLD with a high abuse ratecfdbrand in page title, not in the namegoogle+1 more

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highunlock-profile.cfdscore 52· redirects elsewhere
lure words (login, verify, secure…)unlockTLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highfpfzpi.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumtagnet.cfdscore 30· active website
TLD with a high abuse ratecfdpage impersonates a brandNetflix
Mediummekaawy.cfdscore 28· active website
TLD with a high abuse ratecfdbrand in page title, not in the namewhatsapp
Mediumzenvipo.cfdscore 28· empty page
TLD with a high abuse ratecfdbrand in page title, not in the nametelegram
Lowpulibet-telegramadresi.cfdscore 22echoes telegram· placeholder page
brand in the nametelegramTLD with a high abuse ratecfd
Low0ohoa7jjqh61wtebudmqj2.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Low3388992group.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowactivity-esl-org.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowavepark.cfdscore 16· boilerplate page
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowbendanxixi.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowesl-org-activity.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowfreemsg-esl.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowfreshcut.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowshaguachenyuhang.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowtyzb1uhhmpjd6b2vh2n6ikh.cfdscore 16· no DNS
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowxxphim.cfdscore 16· robots.txt denied
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowaaacinetrack.cfdscore 14· no DNS
lure words (login, verify, secure…)trackTLD with a high abuse ratecfd
Lowaaafilmtrack.cfdscore 14· no DNS
lure words (login, verify, secure…)trackTLD with a high abuse ratecfd
Lowaaamovietrack.cfdscore 14· no DNS
lure words (login, verify, secure…)trackTLD with a high abuse ratecfd
Lowassessment-2026-updates.cfdscore 14· blocked the probe
lure words (login, verify, secure…)updateTLD with a high abuse ratecfd
Lowbonus-zeusdnmbonus.cfdscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowbrokeragerefundable.cfdscore 14· boilerplate page
lure words (login, verify, secure…)refundTLD with a high abuse ratecfd
Lowdenemebonuskk-zeus.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusubz-zeus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusunxd-zeus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusuvr-zeus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusuzeu.cfdscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusuzeuspr.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemebonusuzeuss.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemecibonuss-zeus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemeesbonus-zeus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemexbonusu-zeus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemexybonusu-zeus.cfdscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowdenemezsbonusu-primezeus.cfdscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowio-pay-ff.cfdscore 14· no DNS
lure words (login, verify, secure…)payTLD with a high abuse ratecfd
Lowio-pay-now.cfdscore 14· no DNS
lure words (login, verify, secure…)payTLD with a high abuse ratecfd
Lowjojobet-bonus.cfdscore 14· blocked the probe
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowkipsdenembonus-zeus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowmybiat-bonus.cfdscore 14· no web server
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowproportal.cfdscore 14· robots.txt denied
lure words (login, verify, secure…)portalTLD with a high abuse ratecfd
Lowssdenemebonusu-sszeus.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowunlock-your-profile.cfdscore 14· blocked the probe
lure words (login, verify, secure…)unlockTLD with a high abuse ratecfd
Lowzeu-denemebonusu.cfdscore 14· no DNS
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowzeus-denemebonusum.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowzeus-denemebonusunn.cfdscore 14· blocked the probe
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowzeus-denemexvbonus.cfdscore 14· blocked the probe
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowzeusfd-denemebonusu.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd
Lowzeusprr-denemebonusu.cfdscore 14· active website
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfd

Same data as JSON: /api/zone/risk?day=2026-08-30&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.