Highscore 56 · flagged Tuesday, October 20, 2026

flower-cloud.homes

Appeared in the .homes zone on Tuesday, October 20, 2026; by the end of that day the census found active website about education. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: cloud≈icloud
+28
TLD with a high abuse rate
matched: homes
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: Spaceship, Inc.
+8
brand name at a watch-list registrar
matched: Spaceship, Inc.
+6
Registrar
Spaceship, Inc.
Nameserver provider
Nameservers
elias.ns.cloudflare.com, novalee.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
花云机场官网 (FlowerCloud) - 旗舰级花云 IEPL 全球专线网络与官方订阅指南
Has a form
no
Brand echoed
icloud

Model opinions

Second opinionlooks benignconfidence 60%· claude-opus-5-5

The page is a Chinese-language landing page for the FlowerCloud (花云机场) IEPL proxy subscription service. It has no form and sends its CTAs to an affiliate redirect host (varnexa.invisibleaff.com ×12), so it looks like an affiliate/SEO 'official site' funnel rather than credential capture, and the cloud≈icloud match is spurious.

First passlooks benignconfidence 85%· claude-haiku-4-5

FlowerCloud is a legitimate Chinese VPN/proxy service with its own branding, logo, and business model. The domain name does not impersonate iCloud or Apple—it uses 'cloud' as a generic term in conjunction with 'flower,' which is the service's own established brand name. The page is the service's official website offering its own subscription tiers and features, not attempting to deceive users into surrendering credentials to a different organization.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, October 20, 2026

Screenshot of flower-cloud.homes taken by the zone census on 2026-10-20

Same data as JSON: /api/zone/domain/flower-cloud.homes. This page is not indexed by search engines and does not link to the site it describes.