authguad221.top
Appeared in the .top zone on Wednesday, September 2, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
authguad221.top is an auth-themed, numbered ('221') throwaway name on .top behind Cloudflare NS that serves no content of its own and simply bounces visitors to www.google.com — the classic cloaking/decoy posture of credential-phishing infrastructure being warmed up or hidden from scanners; the Google branding scored here belongs to the redirect destination, not the domain, so there is no directly observable deception yet.
The domain authguad221.top is a typosquat (misspelling of 'authguard') that redirects to Google's legitimate homepage. The domain name itself—not Google's branding—is the deceptive element; it appears designed to impersonate an authentication service ('authguad') to trick users into visiting it, likely for credential harvesting or phishing via the redirect. The typosquat name combined with the offsite redirect is a clear brand-squat abuse pattern.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, September 2, 2026
Same data as JSON: /api/zone/domain/authguad221.top. This page is not indexed by search engines and does not link to the site it describes.