Highscore 50 · flagged Tuesday, November 3, 2026

lantianyun.buzz

Appeared in the .buzz zone on Tuesday, November 3, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: buzz
+8
page impersonates a brand
matched: Netflix
+22
brand in page title, not in the name
matched: chatgpt
+20
Registrar
Spaceship, Inc.
Nameserver provider
Nameservers
jean.ns.cloudflare.com, jim.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
蓝天云 - 蓝天云登录 - 蓝天云vpn
Has a form
no
Brand echoed
—

Model opinions

Second opinionlooks benignconfidence 65%· claude-opus-5-5

The page is a Chinese VPN/proxy service landing page whose brand 蓝天云 is the pinyin of the domain (lantianyun). Netflix and ChatGPT appear only as 'streaming unlock' features, there is no login form, and the sign-up links go to a VPN shop (tizivpn.shop), so this looks like a keyword-style VPN reseller doorway rather than impersonation or fraud.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

This is a VPN service (蓝天云/Lantian Cloud) with its own branding and legitimate-looking infrastructure. The scorer flagged brand impersonation of Netflix and ChatGPT, but the page mentions these services only as examples of content the VPN can unlock—a common VPN marketing practice, not impersonation. The page title, logo, and domain name all belong to the same service. However, the evidence of abuse is strong: VPNs registered on .buzz with Cloudflare nameservers, marketed to Chinese users for 's

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, November 3, 2026

Screenshot of lantianyun.buzz taken by the zone census on 2026-11-03

Same data as JSON: /api/zone/domain/lantianyun.buzz. This page is not indexed by search engines and does not link to the site it describes.