Highscore 54 · flagged Monday, November 9, 2026

meirids-cloud.cyou

Appeared in the .cyou zone on Monday, November 9, 2026; by the end of that day the census found active website about art design music. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: cloud≈icloud
+28
TLD with a high abuse rate
matched: cyou
+8
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
ns1.namemartns.com, ns2.namemartns.com
First-day state
active website
HTTP status
200
Page title
每日大赛推特 - 海外爆料与热门八卦资讯
Has a form
yes
Brand echoed
icloud

Model opinions

Second opinionlooks like abuseconfidence 60%· claude-opus-5-5

The 'cloud≈icloud' hit is a false positive. The page carries no Apple branding, and its only form is a GET search box, so there is no credential capture. The name and title '每日大赛…海外爆料与热门八卦' match a known Chinese leak/gossip (黑料) adult-content brand that rotates throwaway mirror domains on cheap TLDs like .cyou, and the sanitized 'beauty journal' body contradicts that title, which fits a cover page for that mirror network.

First passsuspiciousconfidence 62%· claude-haiku-4-5

The domain name contains 'cloud' (typo-adjacent to 'iCloud') and uses the suspicious .cyou TLD, with a form posting to itself (sealed-room phishing shape). However, the page content is a legitimate-looking Chinese-language beauty pageant and fashion editorial site with no apparent brand impersonation, login attempt, or credential-capture language—making this either a misdirected scorer flag or a domain repurposed from a phishing setup to benign content.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, November 9, 2026

Screenshot of meirids-cloud.cyou taken by the zone census on 2026-11-09

Same data as JSON: /api/zone/domain/meirids-cloud.cyou. This page is not indexed by search engines and does not link to the site it describes.