zorva.lol
Appeared in the .lol zone on Friday, September 11, 2026; by the end of that day the census found boilerplate page. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
zorva.lol is an invented word with no brand resemblance and serves no content of its own; the Google Public DNS page is simply the result of its A record pointing at 8.8.8.8 (a common placeholder), so the 'google' branding and DNS lookup form belong to Google's real site, not to this domain. No deception attempt is visible, though the name is worth re-checking once real content appears.
zorva.lol is a typosquat domain (.lol TLD) that redirects to Google's legitimate dns.google site, masking the impersonation. The attacker controls the zorva.lol domain and its Cloudflare nameservers to intercept traffic and present Google's Public DNS interface, capturing the visitor's perception that they are on a Google property when they are actually on an attacker-controlled domain. This is a redirect-based phishing attack designed to harvest credentials or data by leveraging the legitimacy
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, September 11, 2026
Same data as JSON: /api/zone/domain/zorva.lol. This page is not indexed by search engines and does not link to the site it describes.