Highscore 48 · flagged Sunday, November 1, 2026

cloud-disk.store

Appeared in the .store zone on Sunday, November 1, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: cloud≈icloud
+28
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: NICENIC INTERNATIONAL GROUP CO., LIMITED
+8
brand name at a watch-list registrar
matched: NICENIC INTERNATIONAL GROUP CO., LIMITED
+6
Registrar
NICENIC INTERNATIONAL GROUP CO., LIMITED
Nameserver provider
Nameservers
jeremy.ns.cloudflare.com, sasha.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Cloud Disk — A little space for everything
Has a form
no
Brand echoed
icloud

Model opinions

Second opinionlooks benignconfidence 72%· claude-opus-5-5

"Cloud disk" is a generic phrase, not a brand, and the scorer's cloud≈icloud match is weak. The page is a self-branded cloud-storage landing page ("Cloud Disk — A little space for everything") with no Apple/iCloud imagery, no credential form and no offsite links. The NiceNIC registrar and Cloudflare nameservers are worth watching, but nothing on the page impersonates anyone.

First passlooks benignconfidence 75%· claude-haiku-4-5

The domain hosts a legitimate-looking cloud storage service with its own branding ('Cloud Disk'), original logo, and functional marketing site. While 'cloud' appears in both the domain and Apple's iCloud product name, the page presents 'Cloud Disk' as its own distinct brand with its own product identity, not impersonating iCloud. The name similarity alone, without page content impersonating Apple or attempting credential capture, does not constitute phishing.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, November 1, 2026

Screenshot of cloud-disk.store taken by the zone census on 2026-11-01

Same data as JSON: /api/zone/domain/cloud-disk.store. This page is not indexed by search engines and does not link to the site it describes.