Highscore 46 · flagged Friday, September 11, 2026

meurastreio.lol

Appeared in the .lol zone on Friday, September 11, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: lol
+8
brand in page title, not in the name
matched: google
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Dynadot Inc
Nameserver provider
Nameservers
ns1.dyna-ns.net, ns2.dyna-ns.net
First-day state
redirects elsewhere
HTTP status
200
Page title
Google
Has a form
yes
Brand echoed

Model opinions

Second opinionsuspiciousconfidence 62%· claude-opus-5

"meurastreio" is Portuguese for "my tracking", the classic lure name for Brazilian parcel-delivery (Correios-style) SMS scams, and the domain serves no content of its own but cloaks by redirecting all visitors to www.google.com — a common way these kits hide from scanners while serving the real fee/credential page to SMS targets. The Google branding shown is the redirect destination, not impersonation by this domain, so the evidence is strongly suggestive but not yet decisive.

First passlooks like abuseconfidence 95%· claude-haiku-4-5

The domain meurastreio.lol is a brand-typosquat (obscured Portuguese-like string) with a .lol TLD that immediately redirects to www.google.com. This is a clear squat/redirect abuse: the domain has no legitimate purpose and exists solely to redirect traffic, likely for SEO manipulation or to generate affiliate/referral revenue from Google traffic. The destination being Google's genuine site does not legitimize the typosquat domain itself.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, September 11, 2026

Screenshot of meurastreio.lol taken by the zone census on 2026-09-11

Same data as JSON: /api/zone/domain/meurastreio.lol. This page is not indexed by search engines and does not link to the site it describes.