1yunti.dev
Appeared in the .dev zone on Thursday, October 22, 2026; by the end of that day the census found active website about ai software. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
This is a Chinese proxy/VPN ('airport') sales page. It mentions Netflix only as a streaming service it unlocks, so it is not impersonating Netflix, and it has no login form. However, a day-old .dev calls itself the '一云梯官网' (official site) while its banner says the 一云梯 nodes are unavailable and steers visitors to 'alternatives', a common affiliate brand-hijack pattern, but no offsite links confirm that funnel.
The page is a VPN/proxy service (一云梯) advertising circumvention tools (Trojan protocol, IPLC lines) to unlock geoblocked streaming services like Netflix and access AI tools. While the scorer flagged 'Netflix' mentions, this is not phishing—the site owns its own brand and login. However, the service facilitates copyright circumvention (unlocking Netflix without subscription) and potentially violates terms of service; this constitutes abuse rather than a legitimate service.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, October 22, 2026
Same data as JSON: /api/zone/domain/1yunti.dev. This page is not indexed by search engines and does not link to the site it describes.