foundmy-cloud.xyz
Appeared in the .xyz zone on Thursday, September 3, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
foundmy-cloud.xyz combines Apple's "Find My" and "iCloud" branding in the name and currently 302s straight to the genuine https://www.icloud.com/find page — the classic warming/cloaking stage of the stolen-iPhone SMS lure ("your lost device has been found, sign in to view location"), where the redirect is later swapped for an Apple ID credential form. No legitimate use exists for a non-Apple .xyz registered at a retail registrar that only points at Apple's Find Devices portal.
The domain foundmy-cloud.xyz is a clear typosquat on 'iCloud' (cloud≈icloud morphing) registered at a retail registrar (Dynadot) with webhostbox nameservers, designed to redirect unsuspecting users to Apple's legitimate iCloud service. This is a squat domain with no independent content—its sole function is to intercept traffic intended for iCloud by exploiting a name similarity, making it abuse rather than phishing (which would require credential theft on a fake login page).
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, September 3, 2026
Same data as JSON: /api/zone/domain/foundmy-cloud.xyz. This page is not indexed by search engines and does not link to the site it describes.