Flagged newborn domains, Monday, October 19, 2026

51 names at tier low or above in .cfd, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highte1egrameu.cfdscore 55echoes telegram· redirects elsewhere
brand spelled with digits “te1egrameu→telegram”brand plus digits “te1egrameu”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”+3 more

Model opinion: looks like abuse (target: Telegram), confidence 80%. An opinion, not a finding.

Highvibebay.cfdscore 55echoes ebay· not probed yet
brand in the name “ebay”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Highfedexus.cfdscore 52echoes fedex· empty page
brand in the name “fedex”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameMart Pte. Ltd.”

Model opinion: looks like abuse (target: FedEx), confidence 80%. An opinion, not a finding.

Highpfdadobeinstaller.cfdscore 52echoes adobe· boilerplate page
brand in the name “adobe”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+2 more

Model opinion: looks like abuse (target: Adobe), confidence 80%. An opinion, not a finding.

Highochrebaygreen.cfdscore 46echoes ebay· registrar placeholder
brand in the name “ebay”TLD with a high abuse rate “cfd”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more

Model opinion: looks benign, confidence 95%. An opinion, not a finding.

Highoferta36bz84ieb68.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 45%. An opinion, not a finding.

Highpl-oferta813.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Highpl-oferta9922.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 51%. An opinion, not a finding.

Hightabsobupendi.cfdscore 46· redirects elsewhere
TLD with a high abuse rate “cfd”brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Mediumbulan42jp.cfdscore 38· active website
TLD with a high abuse rate “cfd”page asks for credentials “Login to your Account”
Mediumfrsaetheris.cfdscore 38· active website
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”page impersonates a brand “Netflix”
Mediumpuma303.cfdscore 38· active website
TLD with a high abuse rate “cfd”page asks for credentials “Login to your Account”
Mediummarkindex.cfdscore 28· active website
TLD with a high abuse rate “cfd”brand in page title, not in the name “robinhood”
Lowpnpx5zasru1263wbqvc.cfdscore 21· boilerplate page
random-looking name “H=4.14”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowyczbdtn-7i6fhuc3otk2g.cfdscore 21· boilerplate page
random-looking name “H=4.12”TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowadvance-services.cfdscore 20· no DNS
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “cfd”
Lowaerodashservices.cfdscore 20· no DNS
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “cfd”
Lowverify-login-4frontcu.cfdscore 20· no DNS
lure words (login, verify, secure…) “login,verify”TLD with a high abuse rate “cfd”
Lowdatenschutz-verfahren-service.cfdscore 18· not probed yet
lure words (login, verify, secure…) “service”very long name “29”TLD with a high abuse rate “cfd”
Lowsicherheits-verfahren-service.cfdscore 18· not probed yet
lure words (login, verify, secure…) “service”very long name “29”TLD with a high abuse rate “cfd”
very long name “34”random-looking name “H=4.18”TLD with a high abuse rate “cfd”
Lowlmdmaxxfiles.cfdscore 16· robots.txt denied
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lowmihanzha.cfdscore 16· robots.txt denied
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lownjasbdja.cfdscore 16· robots.txt denied
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lownjsgdhja.cfdscore 16· boilerplate page
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Lownuudo.cfdscore 16· no web server
TLD with a high abuse rate “cfd”free DNS provider “dnsowl.com”
Low4frontcu-account.cfdscore 14· no DNS
lure words (login, verify, secure…) “account”TLD with a high abuse rate “cfd”
Low4frontcu-login.cfdscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cfd”
Lowamber-river-travel-1992.cfdscore 14· no web server
many hyphens “3”TLD with a high abuse rate “cfd”
Lowcozy-compass-bakery-1980.cfdscore 14· no web server
many hyphens “3”TLD with a high abuse rate “cfd”
Lowdatenschutz-service-at.cfdscore 14· server error
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowdatenschutz-support.cfdscore 14· not probed yet
lure words (login, verify, secure…) “support”TLD with a high abuse rate “cfd”
Lowfraud-review1-esl-org.cfdscore 14· no web server
many hyphens “3”TLD with a high abuse rate “cfd”
Lowlogin-4frontcu.cfdscore 14· no DNS
lure words (login, verify, secure…) “login”TLD with a high abuse rate “cfd”
Lowpixelwallet-bitcoin.cfdscore 14· no DNS
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “cfd”
Lowservice-beratung.cfdscore 14· server error
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowservice-management.cfdscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowservice-verfahren-sicher.cfdscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowsicherheits-service-at.cfdscore 14· not probed yet
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowsicherheits-support.cfdscore 14· server error
lure words (login, verify, secure…) “support”TLD with a high abuse rate “cfd”
Lowsupport-datenschutz.cfdscore 14· server error
lure words (login, verify, secure…) “support”TLD with a high abuse rate “cfd”
Lowverfahren-service.cfdscore 14· server error
lure words (login, verify, secure…) “service”TLD with a high abuse rate “cfd”
Lowwinner98.cfdscore 14· not probed yet
lure words (login, verify, secure…) “winner”TLD with a high abuse rate “cfd”
Low0dlx5memicio7tw66e-b757j.cfdscore 13· no DNS
random-looking name “H=3.88”TLD with a high abuse rate “cfd”
Lowfddk3ye-iu5qhn1n3xh2om.cfdscore 13· no DNS
random-looking name “H=4.01”TLD with a high abuse rate “cfd”
Lowmk8tghjxgcruxyobv.cfdscore 13· no DNS
random-looking name “H=3.85”TLD with a high abuse rate “cfd”
Lowv8w3909vqut3rz3la0e63h6.cfdscore 13· no DNS
random-looking name “H=3.83”TLD with a high abuse rate “cfd”
Loww2jb75ffpa80bqtkc.cfdscore 13· not probed yet
random-looking name “H=3.85”TLD with a high abuse rate “cfd”
Lowassociacaodemoradoresdopovoado.cfdscore 12· boilerplate page
very long name “30”TLD with a high abuse rate “cfd”
Lowceveltreinamentoeconsultoria.cfdscore 12· boilerplate page
very long name “28”TLD with a high abuse rate “cfd”

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.