dl-inpost24913.cyou
Appeared in the .cyou zone on Wednesday, November 4, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name 'dl-inpost24913' pairs the Polish parcel brand InPost with a delivery-style prefix and a random number on a throwaway .cyou TLD behind Cloudflare, which is the shape of a numbered parcel-phishing campaign. The offsite redirect to google.com is typical cloaking of non-targeted visitors; the Google page and its form are the destination's own content, not impersonation by this domain.
The domain dl-inpost24913.cyou is a typosquat with no legitimate purpose: it uses a suspicious name combining 'inpost' (a logistics brand) with a number and the .cyou TLD, then immediately redirects to Google's homepage. This is classic domain-squat behaviour—the domain itself makes no sense and exists only to redirect elsewhere, suggesting it was registered for SEO manipulation, redirect spam, or as part of a parking/monetization scheme rather than for phishing or scam operations.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, November 4, 2026
Same data as JSON: /api/zone/domain/dl-inpost24913.cyou. This page is not indexed by search engines and does not link to the site it describes.