onedrivedocs.xn--q9jyb4c
Appeared in the .xn--q9jyb4c zone on Sunday, November 1, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The newly registered name 'onedrivedocs' squats on Microsoft's OneDrive product, sits behind Cloudflare and has no content of its own. It redirects to the Rick Astley 'Never Gonna Give You Up' video, a rickroll redirect that is either a prank or the bot/scanner deflection phishing kits use, so no credential capture is visible yet.
The domain 'onedrivedocs.xn--q9jyb4c' is a typosquat on Microsoft OneDrive with no legitimate purpose—it redirects unconditionally to YouTube's rickroll video. The combination of a brand-hijacked name, Cloudflare nameservers, and a redirect-only infrastructure pattern is consistent with domain squatting or abuse infrastructure, not phishing (which requires deception at the point of visit to capture data).
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, November 1, 2026
Same data as JSON: /api/zone/domain/onedrivedocs.xn--q9jyb4c. This page is not indexed by search engines and does not link to the site it describes.