ubicacion-icloudfind.xyz
Appeared in the .xyz zone on Wednesday, October 28, 2026; by the end of that day the census found boilerplate page. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The name pairs Spanish 'ubicacion' (location) with 'icloudfind', the classic shape of Find My iPhone lures used to steal Apple ID credentials from owners of stolen phones, and it sits on a cheap .xyz via a retail registrar among a cluster of 47 identical pages. The page is only an IIS 404 with no form, so this is a brand-squat staged for deception rather than a live phish yet.
Domain is a clear iCloud typosquat (ubicacion-icloudfind.xyz) registered with a high-risk registrar (Atak Domain) and part of a 47-domain cluster with identical boilerplate pages. Currently returns 404, but the name and cluster infrastructure indicate typosquat/brand-squat abuse rather than active phishing content at this moment.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, October 28, 2026
Same data as JSON: /api/zone/domain/ubicacion-icloudfind.xyz. This page is not indexed by search engines and does not link to the site it describes.