Flagged newborn domains, Thursday, October 15, 2026
69 names at tier medium or above in .icu, highest score first.
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
brand in the name “tmobile”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
brand spelled with digits “workspacegoog1e→google”brand plus digits “workspacegoog1e”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: looks like abuse (target: Google), confidence 80%. An opinion, not a finding.
brand in the name “gmail”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”
one-letter brand typo “goosle≈google”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
TLD with a high abuse rate “icu”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 70%. An opinion, not a finding.
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 58%. An opinion, not a finding.
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
one-letter brand typo “finance≈binance”TLD with a high abuse rate “icu”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “gmail”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
punycode name “南京审计大学金审学院 scripts=CJK”very long name “32”random-looking name “H=4.26”TLD with a high abuse rate “icu”
punycode name “北京第二奶龙学院 scripts=CJK”very long name “29”random-looking name “H=4.03”TLD with a high abuse rate “icu”
punycode name “电子科技大学奶龙学院 scripts=CJK”very long name “33”random-looking name “H=4.17”TLD with a high abuse rate “icu”
punycode name “麻辣奶蛙师范大学 scripts=CJK”very long name “29”random-looking name “H=4.13”TLD with a high abuse rate “icu”
punycode name “浙江奶龙外国语大学 scripts=CJK”very long name “32”random-looking name “H=3.99”TLD with a high abuse rate “icu”
punycode name “奶龙职业技术大学 scripts=CJK”very long name “29”random-looking name “H=4.16”TLD with a high abuse rate “icu”
punycode name “宁波城市职业奶蛙学院 scripts=CJK”very long name “36”random-looking name “H=4.48”TLD with a high abuse rate “icu”
punycode name “济南奶龙职业技术学院 scripts=CJK”very long name “36”random-looking name “H=4.34”TLD with a high abuse rate “icu”
punycode name “广东奶龙职业学院 scripts=CJK”very long name “29”random-looking name “H=4.46”TLD with a high abuse rate “icu”
punycode name “南京奶龙大学 scripts=CJK”random-looking name “H=3.62”TLD with a high abuse rate “icu”
punycode name “桐子律师事务所 scripts=CJK”random-looking name “H=4.26”TLD with a high abuse rate “icu”
punycode name “九一奶蛙大学 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “icu”
punycode name “南昌奶龙大学 scripts=CJK”random-looking name “H=4.12”TLD with a high abuse rate “icu”
punycode name “河北奶龙学院 scripts=CJK”random-looking name “H=4.00”TLD with a high abuse rate “icu”
punycode name “西北奶龙大学 scripts=CJK”random-looking name “H=4.11”TLD with a high abuse rate “icu”
punycode name “西北奶蛙大学 scripts=CJK”random-looking name “H=3.82”TLD with a high abuse rate “icu”
punycode name “大湾区奶龙大学 scripts=CJK”random-looking name “H=4.17”TLD with a high abuse rate “icu”
punycode name “上海奶蛙学院 scripts=CJK”random-looking name “H=4.00”TLD with a high abuse rate “icu”
punycode name “非暨蛙大学 scripts=CJK”random-looking name “H=3.84”TLD with a high abuse rate “icu”
punycode name “奶油大学 scripts=CJK”random-looking name “H=3.66”TLD with a high abuse rate “icu”
punycode name “襄阳奶龙大学 scripts=CJK”random-looking name “H=3.78”TLD with a high abuse rate “icu”
punycode name “奶蛙药科大学 scripts=CJK”random-looking name “H=4.02”TLD with a high abuse rate “icu”
punycode name “奶龙药科大学 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “icu”
punycode name “奶龙财经大学 scripts=CJK”random-looking name “H=4.02”TLD with a high abuse rate “icu”
punycode name “奶鼠师范大学 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “icu”
punycode name “宜宾奶龙大学 scripts=CJK”random-looking name “H=3.93”TLD with a high abuse rate “icu”
punycode name “奶龙海洋大学 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “icu”
punycode name “酱料奶龙大学 scripts=CJK”random-looking name “H=3.88”TLD with a high abuse rate “icu”
punycode name “奶龙语言大学 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “icu”
punycode name “宇宙奶龙大学 scripts=CJK”random-looking name “H=3.68”TLD with a high abuse rate “icu”
punycode name “奶蛙科技大学 scripts=CJK”random-looking name “H=3.92”TLD with a high abuse rate “icu”
punycode name “奶龙科技大学 scripts=CJK”random-looking name “H=3.73”TLD with a high abuse rate “icu”
punycode name “九江奶龙学院 scripts=CJK”random-looking name “H=4.15”TLD with a high abuse rate “icu”
punycode name “奶龙电力大学 scripts=CJK”random-looking name “H=4.01”TLD with a high abuse rate “icu”
punycode name “奶龙工业大学 scripts=CJK”random-looking name “H=3.82”TLD with a high abuse rate “icu”
punycode name “龙哥哥今天又鸽了 scripts=CJK”random-looking name “H=4.13”TLD with a high abuse rate “icu”
punycode name “齐齐哈尔奶龙医学院 scripts=CJK”very long name “30”TLD with a high abuse rate “icu”
punycode name “香港智障更生中心 scripts=CJK”very long name “31”TLD with a high abuse rate “icu”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “amazon”
Same data as JSON: /api/zone/risk?day=2026-10-15&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.