madridbet-google.icu
Appeared in the .icu zone on Sunday, September 20, 2026; by the end of that day the census found boilerplate page. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Name combines the offshore betting brand 'Madridbet' with a 'google' SEO keyword on a cheap .icu behind Cloudflare — the classic Turkish illegal-gambling mirror/gateway shape; the served page is a Turkish-language 403 placeholder (cloaked, no content yet), not a Google impersonation.
The domain name contains 'google' and 'madridbet' (a gambling brand), suggesting potential brand-squatting or setup for deception, but the current page returns a generic 403 Forbidden error in Turkish with no phishing content visible. The infrastructure (Cloudflare NS, retail registrar) and boilerplate status suggest the site is either under construction or intentionally obscured; without evidence of an actual phishing page, the verdict cannot yet be 'phishing,' but the naming pattern and brand
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, September 20, 2026
Same data as JSON: /api/zone/domain/madridbet-google.icu. This page is not indexed by search engines and does not link to the site it describes.