Highscore 52 · flagged Wednesday, September 9, 2026

playgoogle.icu

Appeared in the .icu zone on Wednesday, September 9, 2026; by the end of that day the census found empty page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: google
+30
TLD with a high abuse rate
matched: icu
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: GoDaddy.com, LLC
+8
Registrar
GoDaddy.com, LLC
Nameserver provider
Nameservers
ivy.ns.cloudflare.com, otto.ns.cloudflare.com
First-day state
empty page
HTTP status
200
Page title
Loading...
Has a form
no
Brand echoed
google

Model opinions

First passsuspicioustarget: Googleconfidence 72%· claude-haiku-4-5

Domain name 'playgoogle.icu' combines a brand typosquat pattern with Google's name, but the page currently shows only a blank 'Loading...' state with no visible content, forms, or impersonation attempt. The infrastructure (Cloudflare, GoDaddy registrar) and .icu TLD are consistent with phishing campaigns, but without actual deceptive content visible, the intent cannot yet be confirmed as phishing rather than a parked or under-development domain.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Wednesday, September 9, 2026

Screenshot of playgoogle.icu taken by the zone census on 2026-09-09

Same data as JSON: /api/zone/domain/playgoogle.icu. This page is not indexed by search engines and does not link to the site it describes.