Highscore 42 · flagged Friday, October 16, 2026

tcloud.solutions

Appeared in the .solutions zone on Friday, October 16, 2026; by the end of that day the census found empty page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: tcloud≈icloud
+28
brand name on a rarely-seen nameserver
matched: trademarkarea.com
+6
brand name at a retail registrar
matched: Marcaria International LLC
+8
Registrar
Marcaria International LLC
Nameserver provider
Nameservers
ns01.trademarkarea.com, ns02.trademarkarea.com, ns03.trademarkarea.com
First-day state
empty page
HTTP status
200
Page title
—
Has a form
no
Brand echoed
icloud

Model opinions

Second opinionlooks benignconfidence 80%· claude-opus-5-5

The page is a Portuguese-language cloud backup/DR business site for brCloud, and all its links, the contact form and the Login Console point to brcloud.services and console.brcloud.services, the operator's own domains, with no credential capture on this host. The registrar is Marcaria, a trademark-focused registrar, which fits a corporate alternate registration, and the 'tcloud≈icloud' match is weak because nothing on the page references Apple or iCloud.

First passlooks like phishingtarget: Apple iCloudconfidence 92%· claude-haiku-4-5

Domain tcloud.solutions is a typosquat of iCloud (brand-typo score 28). The page impersonates brCloud's login console but is hosted on a typosquatted iCloud-adjacent domain with suspicious nameservers (trademarkarea.com) and retail registrar (Marcaria). Forms post to brcloud.services, a separate attacker infrastructure domain, in the sealed-room phishing pattern: credentials entered on a typosquat domain are exfiltrated offsite.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, October 16, 2026

Screenshot of tcloud.solutions taken by the zone census on 2026-10-16

Same data as JSON: /api/zone/domain/tcloud.solutions. This page is not indexed by search engines and does not link to the site it describes.