I checked the Descend backend today and found it was full of domains starting with xn and pointing to CF.
I thought it had been gone ages ago.
I fixed part of it. If there are more than four characters after xn- -, hosting isn’t allowed; if there aren’t, there’s no problem.