Highscore 46 · flagged Saturday, October 17, 2026

vipolertw.lol

Appeared in the .lol zone on Saturday, October 17, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: lol
+8
brand in page title, not in the name
matched: google
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Global Domain Group LLC
Nameserver provider
Nameservers
athena.ns.cloudflare.com, west.ns.cloudflare.com
First-day state
redirects elsewhere
HTTP status
200
Page title
Google
Has a form
yes
Brand echoed
—

Model opinions

Second opinionsuspiciousconfidence 60%· claude-opus-5-5

The newly registered random-looking .lol name 'vipolertw' sits behind Cloudflare and serves no content of its own. It simply redirects to www.google.com, a common cloaking pattern that hides a later payload (often gambling or 'vip' download campaigns) from scanners. The Google page and form belong to the real destination, so there is no impersonation, and nothing yet proves abuse.

First passlooks like abuseconfidence 95%· claude-haiku-4-5

The domain vipolertw.lol is a brand-typosquat redirect that serves no content of its own—it immediately redirects to www.google.com. The .lol TLD combined with a non-descriptive name ('vipolertw') and a redirect to Google's legitimate homepage indicates a squat or parking abuse rather than a phishing page. The destination (Google's real site) is legitimate, but the redirect mechanism and typosquat name suggest the domain exists solely for deceptive traffic manipulation or affiliate/tracking purp

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, October 17, 2026

Screenshot of vipolertw.lol taken by the zone census on 2026-10-17

Same data as JSON: /api/zone/domain/vipolertw.lol. This page is not indexed by search engines and does not link to the site it describes.