Highscore 55 · flagged Tuesday, September 15, 2026

ayvideo-cloud.cloud

Appeared in the .cloud zone on Tuesday, September 15, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: cloud≈icloud
+28
form on a brand-styled page
matched: has_form
+18
identical page on many newborns
matched: 150 identical pages
+10
Registrar
Nameserver provider
Nameservers
ns1.domainnamens.com, ns2.domainnamens.com
First-day state
boilerplate page
HTTP status
200
Page title
17c - 视频拍摄后期与内容创作指南
Has a form
yes
Brand echoed
icloud

Model opinions

Second opinionsuspiciousconfidence 60%· claude-opus-5

Chinese-language '17C' video-creation content site on a throwaway .cloud domain that is one of ~150 identical templated pages — a doorway/SEO-gateway network shape, and '17c' is a known Chinese gray-area video/adult brand, but the visible page only offers tutorials and a search box (get→self, text:q), with no credential capture; the 'cloud≈icloud' typo flag is a false positive.

First passlooks like phishingtarget: 17Cconfidence 87%· claude-haiku-4-5

Domain name ayvideo-cloud.cloud uses a typo-squat pattern (cloud≈iCloud) to pose as a cloud service. The page impersonates 17C (a Chinese video creation platform) by displaying its logo, navigation, branding, and layout; a search form posts to itself with no offsite links—a sealed-room phishing pattern. The cluster of 150 identical pages and suspicious nameservers (domainnamens.com) confirm this is a deceptive credential-harvesting campaign, not a legitimate 17C property.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 15, 2026

Screenshot of ayvideo-cloud.cloud taken by the zone census on 2026-09-15

Same data as JSON: /api/zone/domain/ayvideo-cloud.cloud. This page is not indexed by search engines and does not link to the site it describes.