Highscore 55 · flagged Monday, August 31, 2026

app1e-icloud.cfd

Appeared in the .cfd zone on Monday, August 31, 2026; by the end of that day the census found empty page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand spelled with digits
matched: app1e-icloud→apple
+35
brand plus digits
matched: app1e-icloud
+8
TLD with a high abuse rate
matched: cfd
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: Aceville Pte. Ltd.
+8
Registrar
Aceville Pte. Ltd.
Nameserver provider
Nameservers
dave.ns.cloudflare.com, lovisa.ns.cloudflare.com
First-day state
empty page
HTTP status
444
Page title
Has a form
no
Brand echoed
apple

Model opinions

Second opinionlooks like abusetarget: Appleconfidence 85%· claude-opus-5

app1e-icloud.cfd is a leetspeak typosquat combining Apple's brand and its iCloud product on a cheap .cfd TLD behind Cloudflare, currently serving only a 404/no content; there is no deceptive page yet to call it phishing, but no plausible legitimate use exists for this brand-squat, which matches the typical Apple/iCloud credential-phish staging pattern.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

The domain app1e-icloud.cfd uses leet-speak obfuscation of 'apple' combined with 'icloud' (an Apple product), registered via a retail registrar with Cloudflare nameservers—a classic typosquat setup. The page returns 404 with no content, indicating it is parked infrastructure awaiting phishing content deployment rather than an active impersonation page today.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, August 31, 2026

Screenshot of app1e-icloud.cfd taken by the zone census on 2026-08-31

Same data as JSON: /api/zone/domain/app1e-icloud.cfd. This page is not indexed by search engines and does not link to the site it describes.