Highscore 50 · flagged Thursday, October 8, 2026

9yuncloud.click

Appeared in the .click zone on Thursday, October 8, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: click
+8
page impersonates a brand
matched: Netflix
+22
brand in page title, not in the name
matched: netflix
+20
Registrar
—
Nameserver provider
Nameservers
jasmine.ns.cloudflare.com, sri.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
九云机场 - 2026专业IPLC高速机场 | 4K秒开/按量付费/VPN翻墙推荐
Has a form
no
Brand echoed
—

Model opinions

Second opinionlooks benignconfidence 65%· claude-opus-5-5

The page markets its own branded Chinese proxy/VPN 'airport' service (九云机场), with plans, tutorials and a login/register button but no form. Netflix appears only as a streaming-speed claim ('Netflix / YouTube 秒开'), not as impersonation. The nine offsite links go to an affiliate host (jichangbaike.speedworldaff.cc), which fits an affiliate SEO landing page rather than credential capture.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

This is a VPN/proxy service (9yuncloud airport) that mentions Netflix and YouTube as use cases for streaming, but does not impersonate Netflix or any specific brand. The page is its own legitimate-looking business with its own branding, login form, and pricing. However, it is likely an unlicensed VPN circumvention service marketed to bypass GFW (Great Firewall) restrictions, which constitutes abuse under many jurisdictions' terms of service and regulations. The reference to Netflix/YouTube is de

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, October 8, 2026

Screenshot of 9yuncloud.click taken by the zone census on 2026-10-08

Same data as JSON: /api/zone/domain/9yuncloud.click. This page is not indexed by search engines and does not link to the site it describes.