Flagged newborn domains, Friday, September 4, 2026

144 names at tier low or above in .cfd, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalhdhub.cfdscore 68· active website
TLD with a high abuse ratecfdpage impersonates a brandnetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.

Highmercado-libre.cfdscore 55echoes mercadolibre· blocked the probe
brand in the namemercadolibreTLD with a high abuse ratecfdbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more
Highstarlink4dcash.cfdscore 55echoes starlink· no DNS
brand in the namestarlinkbrand plus digitsstarlink4dcashTLD with a high abuse ratecfdbrand name behind Cloudflarecloudflare.com+2 more
Highcometsy.cfdscore 52echoes etsy· no web server
brand in the nameetsyTLD with a high abuse ratecfdbrand name at a retail registrarWeb Commerce Communications Limited dba brand name at a watch-list registrarWeb Commerce Communications Limited dba
Highorderidconfirm3412511.cfdscore 52· redirects elsewhere
lure words (login, verify, secure…)confirmTLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 75%. An opinion, not a finding.

High53sec7re1nvo1cse738284632.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks like phishing, confidence 62%. An opinion, not a finding.

Highapiguardo8129.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highbadidata26594.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highfit61w.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highid51395813.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highid85918591.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highkitorgo.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumjhilkehubtj.cfdscore 38· active website
TLD with a high abuse ratecfdfree DNS providerdnsowl.compage impersonates a brandNetflix
Mediumasmll.cfdscore 36· blocked the probe
TLD with a high abuse ratecfdfree DNS providerdnsowl.combrand in page title, not in the namecloudflare
Mediumtourenmsa.cfdscore 36· active website
TLD with a high abuse ratecfdfree DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumtourenmsb.cfdscore 36· active website
TLD with a high abuse ratecfdfree DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumberaco.cfdscore 28· active website
TLD with a high abuse ratecfdbrand in page title, not in the namewordpress
Mediumdocviewnow.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumforbeca.cfdscore 28· empty page
TLD with a high abuse ratecfdbrand in page title, not in the nametelegram
Mediumhowtofish.cfdscore 28· active website
TLD with a high abuse ratecfdbrand in page title, not in the namesteam
Mediumizdebski.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumjeronimo.cfdscore 28· other
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumkongbai298.cfdscore 28· server error
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumlogindisini.cfdscore 28· active website
lure words (login, verify, secure…)loginTLD with a high abuse ratecfdlogin formhas_form+login words
Mediumorpineotitic.cfdscore 28· parked, for sale
TLD with a high abuse ratecfdbrand in page title, not in the namewordpress
Mediumporto-acesso.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumsimonrg.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumsuperelatfve.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumswdsmanagemnt.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumpayment-service.cfdscore 26· no web server
lure words (login, verify, secure…)payment,payments,serviceTLD with a high abuse ratecfd
lure words (login, verify, secure…)account,supportvery long name32TLD with a high abuse ratecfd
Lowchangairport.cfdscore 22· active website
TLD with a high abuse ratecfdlogin formhas_form+login words
Lownoelgiles.cfdscore 22· active website
TLD with a high abuse ratecfdpage pushes urgent paymentRisk-Free
Lowpan4dlaju.cfdscore 22· active website
TLD with a high abuse ratecfdlogin formhas_form+login words
Lowqantasuserbonuse.cfdscore 22· boilerplate page
lure words (login, verify, secure…)bonusTLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lownwhd4r6gcujmai5d6x21fj.cfdscore 21· no DNS
random-looking nameH=4.19TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Lowget-refunds.cfdscore 20· no DNS
lure words (login, verify, secure…)refund,refundsTLD with a high abuse ratecfd
Lowportal-win.cfdscore 20· robots.txt denied
lure words (login, verify, secure…)portal,winTLD with a high abuse ratecfd
Lowprize-win.cfdscore 20· robots.txt denied
lure words (login, verify, secure…)prize,winTLD with a high abuse ratecfd
Lowdh-xlu02-b-greenapple666931b.cfdscore 18· no web server
many hyphens3very long name28TLD with a high abuse ratecfd
Lowdh-xlu03-c-sweetpotato883455c.cfdscore 18· no web server
many hyphens3very long name29TLD with a high abuse ratecfd
many hyphens7very long name55TLD with a high abuse ratecfd
many hyphens5very long name47TLD with a high abuse ratecfd
lure words (login, verify, secure…)supportvery long name34TLD with a high abuse ratecfd
Lowxlu-dh-01a-blueberry1391818a.cfdscore 18· empty page
many hyphens3very long name28TLD with a high abuse ratecfd
Lowxlu-dh-04d-ricevinegar1391818d.cfdscore 18· empty page
many hyphens3very long name30TLD with a high abuse ratecfd
Lowxlu-dh04-d-greentangerine666951d.cfdscore 18· empty page
many hyphens3very long name32TLD with a high abuse ratecfd
very long name33random-looking nameH=4.19TLD with a high abuse ratecfd
Low1fhmbbu1b5.cfdscore 16· robots.txt denied
TLD with a high abuse ratecfdfree DNS providerdnsowl.com
Low3uhceplimc.cfdscore 16· robots.txt denied
TLD with a high abuse ratecfdfree DNS providerdnsowl.com

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.