grugs.cfd
Appeared in the .cfd zone on Tuesday, October 20, 2026; by the end of that day the census found active website about crypto web3. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
This is a $GRUG memecoin promo that borrows Google's name, logo colours and 'I'm Feeling Lucky' styling as parody. It pushes 'Buy on pump.fun', a Connect Wallet button and a Telegram contact, which makes it a crypto lure rather than a credential phish; the only form is a GET search box posting to itself.
The site uses Google's visual branding (logo, colors, search interface) and page title to parody Google, but this is a crypto token promotion ($GRUG on pump.fun), not impersonation of Google for credential theft. The form captures search queries, not passwords or payment data. This is a scam crypto/meme token lure using brand parody and humor as a wrapper around a speculative crypto asset—typical of pump.fun schemes—rather than phishing for Google credentials.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, October 20, 2026
Same data as JSON: /api/zone/domain/grugs.cfd. This page is not indexed by search engines and does not link to the site it describes.