favix.lol
Appeared in the .lol zone on Friday, September 11, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
favix.lol is not a brand typosquat and serves no content of its own — it simply redirects to Google's own Public DNS resolver page, a common placeholder target for an unconfigured Cloudflare-hosted domain; the 'Google' branding and form belong to dns.google, not this domain.
Domain favix.lol with no legitimate connection to Google redirects to dns.google, creating a deceptive redirect chain. The attacker owns the redirect source (favix.lol) and controls the nameservers (Cloudflare), allowing them to harvest credentials or data from users following the redirect while appearing to arrive at a legitimate Google property. This is a classic redirect-based phishing setup designed to deceive visitors about the origin of the page they are visiting.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, September 11, 2026
Same data as JSON: /api/zone/domain/favix.lol. This page is not indexed by search engines and does not link to the site it describes.