70rder-chck1238781.cfd
Appeared in the .cfd zone on Thursday, September 10, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name '70rder-chck1238781.cfd' is leetspeak 'order-check' plus a random order-number string — the classic disposable shape of SMS parcel/order-confirmation scam links — on a cheap .cfd TLD behind Cloudflare NS; it serves no content of its own but blank-redirects to www.google.com, which is typical cloaking that shows a harmless destination to scanners while delivering the lure to targeted mobile traffic. The Google branding/form in the evidence belongs to google.com and is not impersonation b
The domain name '70rder-chck1238781.cfd' is a typosquat (resembling 'order-check') with no legitimate purpose; it redirects unconditionally to Google's homepage rather than serving its own content. This redirect-to-legitimate-site pattern is a common abuse tactic to establish domain reputation or exploit traffic, not phishing of Google itself.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, September 10, 2026
Same data as JSON: /api/zone/domain/70rder-chck1238781.cfd. This page is not indexed by search engines and does not link to the site it describes.