Flagged newborn domains, Saturday, October 10, 2026

291 names at tier low or above in .cfd, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highamazoniacloudbr.cfdscore 55echoes amazon· placeholder page
brand in the name “amazon”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Highfinance-portal.cfdscore 55echoes binance· not probed yet
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “portal”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”
Highlcloud-la.cfdscore 55echoes icloud· robots.txt denied
one-letter brand typo “lcloud≈icloud”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Highupdate-ato-services-info-au-login.cfdscore 55· redirects elsewhere
lure words (login, verify, secure…) “login,service,services,update”many hyphens “5”very long name “33”TLD with a high abuse rate “cfd”+2 more

Model opinion: looks like phishing (target: Australian Taxation Office (ATO)), confidence 80%. An opinion, not a finding.

Highupdate-info-au-login.cfdscore 55· redirects elsewhere
lure words (login, verify, secure…) “login,update”many hyphens “3”TLD with a high abuse rate “cfd”brand in page title, not in the name “google”+1 more

Model opinion: suspicious, confidence 68%. An opinion, not a finding.

Highupdates-info-au-login.cfdscore 55· redirects elsewhere
lure words (login, verify, secure…) “login,update”many hyphens “3”TLD with a high abuse rate “cfd”brand in page title, not in the name “google”+1 more

Model opinion: suspicious, confidence 68%. An opinion, not a finding.

Highhuluyt043.cfdscore 52echoes hulu· no web server
brand in the name “hulu”brand plus digits “huluyt043”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”
Highroblox-takerobux.cfdscore 52echoes roblox· robots.txt denied
brand in the name “roblox”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Highabstractlszyz.cfdscore 46· blocked the probe
TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highdlappfinland.cfdscore 46· active website
TLD with a high abuse rate “cfd”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highdloneappgets.cfdscore 46· active website
TLD with a high abuse rate “cfd”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highmabanque.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highonlinemanagement.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 53%. An opinion, not a finding.

Highsitemv0wdmcr07jd.cfdscore 46· blocked the probe
TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highjisicloudyun.cfdscore 42echoes icloud· active website
brand in the name “icloud”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more

Model opinion: looks benign, confidence 66%. An opinion, not a finding.

Highkebayatotoh.cfdscore 42echoes ebay· placeholder page
brand in the name “ebay”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highmaltepebayanlar.cfdscore 42echoes ebay· not probed yet
brand in the name “ebay”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Mediumcuansloto.cfdscore 28· blocked the probe
TLD with a high abuse rate “cfd”brand in page title, not in the name “cloudflare”
Mediumlinencompass.cfdscore 28· active website
TLD with a high abuse rate “cfd”brand in page title, not in the name “nationwide”
Mediumveyro.cfdscore 28· active website
TLD with a high abuse rate “cfd”brand in page title, not in the name “instagram”
Mediumboocasino-log-in-official.cfdscore 26· not probed yet
lure words (login, verify, secure…) “login,official”many hyphens “3”TLD with a high abuse rate “cfd”
Lowconfirm-secure-ricardo.cfdscore 20· no web server
lure words (login, verify, secure…) “confirm,secure”TLD with a high abuse rate “cfd”
Lowrecoveryback.cfdscore 20· boilerplate page
lure words (login, verify, secure…) “recover,recovery”TLD with a high abuse rate “cfd”
Lowunlockedgroup.cfdscore 20· empty page
lure words (login, verify, secure…) “locked,unlock”TLD with a high abuse rate “cfd”
very long name “35”random-looking name “H=4.32”TLD with a high abuse rate “cfd”
Low1228888.cfdscore 16· active website
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low1win-btx8.cfdscore 16· placeholder page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low2337777.cfdscore 16· active website
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low24jetton.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low7jetton7.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowaudolivei.cfdscore 16· active website
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowblockchain-lab.cfdscore 16· robots.txt denied
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowfcetvory-love.cfdscore 16· active website
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowfcftvory-love.cfdscore 16· active website
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowfuyouze.cfdscore 16· empty page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowgo-jetton.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowinboxgri.cfdscore 16· active website
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowitalo-rent.cfdscore 16· robots.txt denied
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjazzyjetton.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-000.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-24h.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-772.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-arena.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-dragon.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-friday.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-igra.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-m2x.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-play-24.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-q9.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowjetton-r7m.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”

Same data as JSON: /api/zone/risk?day=2026-10-10&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.