form541613513.cfd
Appeared in the .cfd zone on Thursday, August 27, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page shown is the genuine google.com after an off-site redirect, so the 'Google' title/form hits are false positives rather than impersonation; however a randomly numbered 'form...' name on .cfd behind Cloudflare that bounces visitors to google.com is a classic cloaked landing pattern for a phishing/form kit, so it warrants monitoring rather than a clean verdict.
The domain redirects to www.google.com (the final URL is Google's genuine homepage), and the screenshot shows Google's authentic search interface served from Google's own servers (gws). The scorer's alerts about 'brand-in-title' and 'form-on-brand-page' are false positives—the page is Google's actual property, not an impersonation. The redirect-offsite behavior is benign because it goes to the real Google, not a phishing lookalike.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, August 27, 2026
Same data as JSON: /api/zone/domain/form541613513.cfd. This page is not indexed by search engines and does not link to the site it describes.