Highscore 55 · flagged Thursday, October 29, 2026

binance-en.cfd

Appeared in the .cfd zone on Thursday, October 29, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: binance
+30
TLD with a high abuse rate
matched: cfd
+8
brand in page title, not in the name
matched: google
+20
form on a brand-styled page
matched: has_form
+18
brand name redirects elsewhere
matched: google.com
+8
Registrar
—
Nameserver provider
Nameservers
ns1.beget.com, ns1.beget.pro, ns1.beget.ru, ns2.beget.com, ns2.beget.pro, ns2.beget.ru
First-day state
redirects elsewhere
HTTP status
200
Page title
Google
Has a form
yes
Brand echoed
binance

Model opinions

Second opinionlooks like abusetarget: Binanceconfidence 80%· claude-opus-5-5

The name 'binance-en.cfd' is a brand-squat on the Binance exchange, on a cheap .cfd TLD with Beget (Russian) hosting, and it carries no content of its own. It redirects to google.com, a common cloaking move to hide a phishing page from scanners until it is activated. The Google page and form belong to the redirect destination and are not impersonation by this domain.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

The domain binance-en.cfd contains 'binance' (a cryptocurrency exchange brand) in its name but redirects to Google's homepage, a classic typosquat/brand-squat pattern with no legitimate purpose. The .cfd TLD and Beget nameservers are consistent with abuse infrastructure; the redirect to Google is a decoy, not evidence of legitimacy.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, October 29, 2026

Screenshot of binance-en.cfd taken by the zone census on 2026-10-29

Same data as JSON: /api/zone/domain/binance-en.cfd. This page is not indexed by search engines and does not link to the site it describes.