0d6ge6pl173p4ny.icu
Appeared in the .icu zone on Saturday, September 5, 2026; by the end of that day the census found redirects elsewhere. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Random-string .icu label (0d6ge6pl173p4ny) behind Cloudflare NS serves no content of its own and 302s to the genuine www.apple.com — a classic cloaked-redirect/TDS shape where scanners get the legitimate brand site while targeted traffic is diverted elsewhere; the Apple branding shown belongs to the real destination, so no impersonation is proven yet.
The domain name 0d6ge6pl173p4ny.icu is a nonsensical string with no legitimate purpose; it uses the .icu TLD (associated with abuse) and immediately redirects to Apple's legitimate site. This is a classic typosquat/redirect squat pattern designed to capture users through misspellings or malicious links, then funnel traffic to the real site—a common abuse tactic for SEO manipulation, click fraud, or credential harvesting upstream. The redirect itself is not phishing (the destination is genuine),
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Saturday, September 5, 2026
Same data as JSON: /api/zone/domain/0d6ge6pl173p4ny.icu. This page is not indexed by search engines and does not link to the site it describes.