bitfi.lol
Appeared in the .lol zone on Thursday, October 29, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The domain serves no content of its own and bounces visitors to www.google.com. That is a common cloaking pattern for crypto-phishing kits that hide the real page from scanners, and 'bitfi' echoes a crypto-wallet/DeFi name on a cheap .lol TLD via NiceNIC behind Cloudflare. The Google page is the redirect target, not impersonation, and nothing deceptive has been served yet, so the evidence is not decisive.
bitfi.lol is a typosquat domain (Bitfi is a hardware wallet brand) registered with a questionable registrar and Cloudflare nameservers, redirecting to Google's homepage. The redirect to a legitimate third-party site with no interception layer is a common abuse pattern used to build reputation or deceive users about the domain's purpose; the .lol TLD and non-intuitive redirect chain indicate the domain's only plausible purpose is deception or squat activity.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, October 29, 2026
Same data as JSON: /api/zone/domain/bitfi.lol. This page is not indexed by search engines and does not link to the site it describes.