Mediumscore 38 · flagged Sunday, October 4, 2026

bufonverbenero.meme

Appeared in the .meme zone on Sunday, October 4, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in page title, not in the name
matched: cloudflare
+20
form on a brand-styled page
matched: has_form
+18
Registrar
CloudFlare, Inc.
Nameserver provider
Nameservers
grant.ns.cloudflare.com, jewel.ns.cloudflare.com
First-day state
redirects elsewhere
HTTP status
200
Page title
Sign in ・ Cloudflare Access
Has a form
yes
Brand echoed
—

Model opinions

Second opinionlooks benignconfidence 82%· claude-opus-5-5

The redirect lands on Cloudflare's own Zero Trust login (cloudflareaccess.com, the real Cloudflare Access domain) gating 'bufonverbenero.meme'. This is the owner protecting a private site, not Cloudflare impersonation. The name is a non-brand Spanish phrase ('carnival jester') on Cloudflare registrar and nameservers.

First passlooks like phishingtarget: Cloudflareconfidence 95%· claude-haiku-4-5

The domain bufonverbenero.meme redirects to a Cloudflare Access login page that impersonates Cloudflare's branding (logo, title, styling) to capture email credentials. The page displays 'Log in to bufonverbenero.meme' under the Cloudflare Access header, deceiving visitors into believing this is a legitimate Cloudflare service when it is not; the form posts to bufonverbenero.cloudflareaccess.com with no legitimate business purpose for the arbitrary .meme domain.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

Same data as JSON: /api/zone/domain/bufonverbenero.meme. This page is not indexed by search engines and does not link to the site it describes.