cloud-token.info
Appeared in the .info zone on Monday, August 31, 2026; by the end of that day the census found active website about adult. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Domain name (cloud-token.info) has no relation to its content: a Turkish-language 'Ankara Escort 2026 / BAŞKENT VIP' escort-ad portal, the classic pattern of a freshly registered domain used as an SEO doorway/spam page for illegal escort advertising in Turkey. No credential or payment form and no brand impersonation, so it is not phishing — the 'cloud≈icloud' typo signal is noise.
The domain 'cloud-token.info' uses 'cloud' to approximate 'iCloud' (Apple's brand), paired with Cloudflare nameservers and registered through a watch-list registrar—classic brand-squat signals. However, the page content is an escort service advertisement in Turkish with no attempt to impersonate Apple, capture credentials, or deceive visitors into thinking they are on an Apple property. This is a typosquat domain repurposed for unrelated adult services (abuse) rather than phishing.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, August 31, 2026
Same data as JSON: /api/zone/domain/cloud-token.info. This page is not indexed by search engines and does not link to the site it describes.