ver541321.cfd
Appeared in the .cfd zone on Monday, September 14, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The domain serves no content of its own, just a 302 to www.google.com — a classic cloaking/decoy default for a throwaway name ("ver" + random digits on the low-cost .cfd TLD, Cloudflare NS, bulk Turkish registrar) whose real payload is typically delivered only to targeted victims via SMS/email links; the Google branding shown belongs to the redirect destination, not this host, so there is no decisive evidence of impersonation yet.
The domain ver541321.cfd is a typosquat redirect that silently forwards users to www.google.com without any legitimate purpose. The domain name bears no resemblance to Google, and the redirect serves no utility to a visitor (who could navigate to Google directly); its only plausible function is to deceive traffic sources or analytics into routing credential-capture attempts or fraud through a disposable domain that bypasses brand reputation checks.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, September 14, 2026
Same data as JSON: /api/zone/domain/ver541321.cfd. This page is not indexed by search engines and does not link to the site it describes.