Highscore 55 · flagged Wednesday, September 9, 2026

ym-low-cost-cloud-management-4e.top

Appeared in the .top zone on Wednesday, September 9, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: cloud≈icloud
+28
many hyphens
matched: 5
+6
very long name
matched: 31
+4
brand plus digits
matched: ym-low-cost-cloud-management-4e
+8
TLD with a high abuse rate
matched: top
+8
identical page on many newborns
matched: 1934 identical pages
+10
Registrar
Nameserver provider
Nameservers
curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com, salvador.ns.porkbun.com
First-day state
boilerplate page
HTTP status
403
Page title
403 Forbidden
Has a form
no
Brand echoed
icloud

Model opinions

Second opinionlooks benignconfidence 85%· claude-opus-5

Page is Porkbun's standard "This domain is expired" registrar placeholder (403, only offsite link and search form go to porkbun.com); the 1934 'identical pages' cluster is that placeholder, not a phishing kit. The name is generic cloud-management keyword text — 'cloud'≈'icloud' is a scorer false positive with no Apple branding anywhere.

First passlooks benignconfidence 92%· claude-haiku-4-5

This is a Porkbun registrar's standard expired-domain placeholder page showing '403 Forbidden' and 'This domain is expired.' The page is the hosting provider's own boilerplate, not an impersonation attempt. The domain name contains 'cloud' and 'ym' but shows no phishing infrastructure—no login form, no credential capture, and no impersonation of iCloud or any other brand.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Wednesday, September 9, 2026

Screenshot of ym-low-cost-cloud-management-4e.top taken by the zone census on 2026-09-09

Same data as JSON: /api/zone/domain/ym-low-cost-cloud-management-4e.top. This page is not indexed by search engines and does not link to the site it describes.