cloud-node-fi.fun
Appeared in the .fun zone on Tuesday, November 10, 2026; by the end of that day the census found active website about saas & tech. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page presents its own generic 'NordicCloud' Finnish cloud-hosting brand with signup and console-login forms posting to self; the 'cloud≈icloud' typo hit is spurious, and nothing impersonates Apple or another real organisation. Still, a polished but fictional-looking provider (referencing api.nordiccloud.fi, which this domain is not) on a throwaway .fun name via reg.ru fits a cloaking decoy or fake-service front, so it is not clearly benign.
The domain cloud-node-fi.fun impersonates NordicCloud (a real Finnish cloud provider at nordiccloud.fi) through a typosquat name and hosts a full replica of NordicCloud's login page. The password form posts to itself with no offsite links (sealed-room phishing shape), and the page displays NordicCloud's branding, products, and pricing to deceive visitors into entering credentials on the attacker's domain rather than the legitimate nordiccloud.fi.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, November 10, 2026
Same data as JSON: /api/zone/domain/cloud-node-fi.fun. This page is not indexed by search engines and does not link to the site it describes.