cocoducks.autos
Appeared in the .autos zone on Tuesday, September 1, 2026; by the end of that day the census found active website about ai software. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Chinese-language VPN/"机场" proxy service marketing page with its own COCODuck branding, pricing tiers and FAQ; Netflix/Disney+/ChatGPT are listed only as unlocked services, not impersonated, and outbound links go to an affiliate tracker (breezenetaff.com) rather than any brand login. No credential or payment form — a grey-market affiliate funnel, not phishing.
COCODuck is a VPN/proxy service marketing itself under its own brand name with its own logo, pricing, and registration flow—not impersonating Netflix. However, the SCORER flagged 'brand-impersonation (Netflix)' because the page mentions Netflix as a supported streaming service it can unlock. This is a legitimate VPN product page, not phishing. The domain is registered legitimately (Cloudflare nameservers, active status) and operates its own service. VPN services that bypass geo-restrictions may
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, September 1, 2026
Same data as JSON: /api/zone/domain/cocoducks.autos. This page is not indexed by search engines and does not link to the site it describes.