What Is .cfd and Why Does It Show Up in Spam?

The .cfd domain is a generic top-level domain (gTLD) that officially stands for “Clothing, Fashion, and Design.” It was created as a specialized web address for fashion brands, clothing retailers, designers, and lifestyle e-commerce stores. In practice, though, .cfd has become widely associated with spam and phishing campaigns, which is likely why you’re looking it up.

Who .cfd Was Designed For

The .cfd extension was marketed toward the fashion and retail industry. Its intended audience includes fashion houses, clothing and footwear brands, cosmetics companies, online boutiques, fashion bloggers, influencers, and photographers showcasing portfolios. The idea was to give these businesses a memorable, industry-specific web address, similar to how .tech targets technology companies or .art targets creative professionals.

There is no connection to “contracts for difference” (CFDs), the financial trading instruments. Despite the shared acronym, the domain extension was not built for the finance industry.

Why .cfd Shows Up in Spam

Two features of .cfd make it attractive to bad actors. First, there are zero restrictions on who can register one. Any person or organization in any country can buy a .cfd domain with no documentation, identity verification, or proof of a legitimate business. Second, first-year registration prices are extremely low. One major registrar lists the introductory price at $1.39 for the first year. That combination of cheap registration and no vetting makes it easy to spin up disposable websites for phishing emails, fake storefronts, and malware distribution.

Broadcom’s security research team flagged .cfd as a “new favorite” top-level domain for spreading phishing emails. Because the extension is unfamiliar to most people, recipients are less likely to recognize it as suspicious compared to a clearly fake .com address. Attackers register a domain, use it for a short campaign, and abandon it before it gets blacklisted.

This doesn’t mean every .cfd website is malicious. Legitimate fashion businesses do use the extension. But the volume of abuse on .cfd domains is high enough that many email security filters treat messages containing .cfd links with extra scrutiny.

How .cfd Compares to Common Extensions

Standard domain extensions like .com and .net typically cost around $15 per year for both registration and renewal. A .cfd domain can cost under $2 for the first year, but renewal jumps to roughly $22 per year, which is actually more expensive than a .com at that point. That pricing structure encourages short-term, disposable use rather than long-term brand building.

You can register a .cfd domain for as little as one year or as long as ten years, with renewal periods up to nine years. The Internet Corporation for Assigned Names and Numbers (ICANN) also adds a $0.20 annual fee on top of the listed price for every domain registration, renewal, or transfer.

What to Do If You See a .cfd Link

If you received an email or message containing a .cfd link, treat it with caution. Check whether the sender is someone you recognize and whether the message makes sense in context. Hover over the link (without clicking) to see the full URL. If it claims to be from a well-known company but uses a .cfd address instead of that company’s real domain, it’s almost certainly a phishing attempt.

Legitimate businesses in the fashion industry may use .cfd domains, but major brands overwhelmingly stick with .com or country-specific extensions. If you’re shopping online and land on a .cfd site you’ve never heard of, look for standard trust signals: a physical business address, working customer service contact information, and secure checkout (the padlock icon in your browser’s address bar). The absence of those signals on any unfamiliar domain, not just .cfd, is a reason to shop elsewhere.

Should You Register a .cfd Domain?

If you run a fashion or design business, a .cfd domain is technically available to you and inexpensive to try. But the extension carries real reputational baggage. Because so many .cfd domains are used for spam and phishing, your emails may land in recipients’ junk folders more often, and some visitors may hesitate to trust your site. A .com or well-known country extension will almost always serve you better for building credibility with customers.

The low first-year price can also be misleading. At roughly $22 per year for renewals, .cfd costs more to maintain than a .com over time. If you’re drawn to a niche extension for branding purposes, weigh that ongoing cost against the limited recognition the extension currently has.