n6dhfl.makeup
Appeared in the .makeup zone on Thursday, August 27, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The random label n6dhfl.makeup simply 302s off-site to the genuine www.google.com (server 'gws'), so the 'Google' title, form and logo are the real Google homepage, not a hosted clone; a redirect to a legitimate site is a common placeholder and shows no attempt to capture credentials on the domain itself.
The domain redirects to www.google.com and serves the authentic Google homepage from Google's own server (gws). This is a redirect, not impersonation—the visitor is taken to the real Google, not a fake login page on the attacker's infrastructure.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, August 27, 2026
Same data as JSON: /api/zone/domain/n6dhfl.makeup. This page is not indexed by search engines and does not link to the site it describes.