Flagged newborn domains, Friday, September 4, 2026

30 names at tier medium or above in .cfd, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalhdhub.cfdscore 68· active website
TLD with a high abuse ratecfdpage impersonates a brandnetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.

Highmercado-libre.cfdscore 55echoes mercadolibre· blocked the probe
brand in the namemercadolibreTLD with a high abuse ratecfdbrand name behind Cloudflarecloudflare.combrand name at a retail registrarDynadot Inc+3 more
Highstarlink4dcash.cfdscore 55echoes starlink· no DNS
brand in the namestarlinkbrand plus digitsstarlink4dcashTLD with a high abuse ratecfdbrand name behind Cloudflarecloudflare.com+2 more
Highcometsy.cfdscore 52echoes etsy· no web server
brand in the nameetsyTLD with a high abuse ratecfdbrand name at a retail registrarWeb Commerce Communications Limited dba brand name at a watch-list registrarWeb Commerce Communications Limited dba
Highorderidconfirm3412511.cfdscore 52· redirects elsewhere
lure words (login, verify, secure…)confirmTLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious (target: Google), confidence 75%. An opinion, not a finding.

High53sec7re1nvo1cse738284632.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks like phishing, confidence 62%. An opinion, not a finding.

Highapiguardo8129.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highbadidata26594.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highfit61w.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highid51395813.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highid85918591.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highkitorgo.cfdscore 46· redirects elsewhere
TLD with a high abuse ratecfdbrand in page title, not in the namegoogleform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Mediumjhilkehubtj.cfdscore 38· active website
TLD with a high abuse ratecfdfree DNS providerdnsowl.compage impersonates a brandNetflix
Mediumasmll.cfdscore 36· blocked the probe
TLD with a high abuse ratecfdfree DNS providerdnsowl.combrand in page title, not in the namecloudflare
Mediumtourenmsa.cfdscore 36· active website
TLD with a high abuse ratecfdfree DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumtourenmsb.cfdscore 36· active website
TLD with a high abuse ratecfdfree DNS providerdnsowl.combrand in page title, not in the namegoogle
Mediumberaco.cfdscore 28· active website
TLD with a high abuse ratecfdbrand in page title, not in the namewordpress
Mediumdocviewnow.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumforbeca.cfdscore 28· empty page
TLD with a high abuse ratecfdbrand in page title, not in the nametelegram
Mediumhowtofish.cfdscore 28· active website
TLD with a high abuse ratecfdbrand in page title, not in the namesteam
Mediumizdebski.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumjeronimo.cfdscore 28· other
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumkongbai298.cfdscore 28· server error
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumlogindisini.cfdscore 28· active website
lure words (login, verify, secure…)loginTLD with a high abuse ratecfdlogin formhas_form+login words
Mediumorpineotitic.cfdscore 28· parked, for sale
TLD with a high abuse ratecfdbrand in page title, not in the namewordpress
Mediumporto-acesso.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumsimonrg.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumsuperelatfve.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumswdsmanagemnt.cfdscore 28· blocked the probe
TLD with a high abuse ratecfdbrand in page title, not in the namecloudflare
Mediumpayment-service.cfdscore 26· no web server
lure words (login, verify, secure…)payment,payments,serviceTLD with a high abuse ratecfd

Same data as JSON: /api/zone/risk?day=2026-09-04&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.