veriff291.click
Appeared in the .click zone on Tuesday, October 6, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name squats the distinctive identity-verification brand Veriff, with a serial number ('291') on a cheap .click TLD behind Cloudflare, which fits a numbered campaign of throwaway domains. It serves no content of its own and redirects to google.com, a common cloaking move that hides a KYC phish from scanners. The Google page and its form are the destination's, not impersonation by this domain.
The domain 'veriff291.click' is a typosquat of Veriff (a legitimate identity verification company) with a suspicious numeric suffix, registered at an off-brand registrar and configured to redirect to Google's homepage. This redirect-to-legitimate-site pattern is a classic abuse tactic used to build link equity, test infrastructure, or serve as a parking/redirect proxy. The domain name itself (not the Google destination page) is the abuse artifact.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, October 6, 2026
Same data as JSON: /api/zone/domain/veriff291.click. This page is not indexed by search engines and does not link to the site it describes.