ractdgovetltd.buzz
Appeared in the .buzz zone on Wednesday, September 2, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Randomised .buzz name containing 'gov'/'ltd' tokens, registered via Gname behind Cloudflare NS, serving no content of its own but blanket-redirecting all visitors to www.google.com — a classic cloaking posture for SMS-lure/smishing infrastructure that only shows its real payload to targeted traffic. The Google branding shown belongs to the redirect destination, so there is no impersonation to judge yet, but the name and redirect-to-google shape are not those of a legitimate site.
The domain ractdgovetltd.buzz is a typosquat/brand-squat with no legitimate purpose: it contains 'google' obfuscated in a nonsensical name and redirects directly to www.google.com. The domain itself serves no content and exists solely to capture traffic or exploit the Google brand name; this is classic domain squatting abuse, not phishing (which would require a deceptive page impersonating Google on the attacker's infrastructure).
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, September 2, 2026
Same data as JSON: /api/zone/domain/ractdgovetltd.buzz. This page is not indexed by search engines and does not link to the site it describes.