dns.pizza

Flagged newborn domains, Saturday, October 17, 2026

29 names at tier medium or above in .icu, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-2110-2010-1910-1710-1610-1510-1310-1010-0910-08clear filters
Highgov-tr.icuscore 52· blocked the probe
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Highsecurelainelp.icuscore 52· blocked the probe
lure words (login, verify, secure…) “secure”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Hightiktokfa.icuscore 52echoes tiktok· not probed yet
brand in the name “tiktok”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”
Highgowinvoter.icuscore 46· redirects elsewhere
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 42%. An opinion, not a finding.

Highneedclickwin.icuscore 46· redirects elsewhere
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”

Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.

Highhk-telegramc.icuscore 40echoes telegram· boilerplate page
brand in the name “telegram”TLD with a high abuse rate “icu”brand name at a retail registrar “GLOBAL ASSET DOMAINS INC.”identical page on many newborns “171 identical pages”
Highhk-telegrame.icuscore 40echoes telegram· boilerplate page
brand in the name “telegram”TLD with a high abuse rate “icu”brand name at a retail registrar “GLOBAL ASSET DOMAINS INC.”identical page on many newborns “171 identical pages”
Mediumnotification-security-session-services.icuscore 36· no DNS
lure words (login, verify, secure…) “security,service,services”many hyphens “3”very long name “38”TLD with a high abuse rate “icu”
Mediumxn--psszg58cydsd422eu3a231fqf5e5rrba.icuscore 35· empty page
punycode name “宇宙无敌霸王龙奶龙大学 scripts=CJK”very long name “36”random-looking name “H=4.31”TLD with a high abuse rate “icu”
Mediumxn--v4qq1w13bd5gt0gekal24agjd75eio5a.icuscore 35· no DNS
punycode name “泥巴孩儿未来科技灌溉 scripts=CJK”very long name “36”random-looking name “H=4.37”TLD with a high abuse rate “icu”
Mediumxn--6kr28k0gz4evu0b1z3e.icuscore 31· no web server
punycode name “河南奶龙大学 scripts=CJK”random-looking name “H=4.01”TLD with a high abuse rate “icu”
Mediumxn--8mrq2kk1b82dyt3ckdm.icuscore 31· no web server
punycode name “原神师范大学 scripts=CJK”random-looking name “H=3.78”TLD with a high abuse rate “icu”
Mediumxn--psszg58ci9a8y5e6hek83f.icuscore 31· redirects elsewhere
punycode name “秦皇岛奶龙大学 scripts=CJK”random-looking name “H=4.14”TLD with a high abuse rate “icu”
Mediumxn--psszg58co75h8ve4zs.icuscore 31· active website
punycode name “奶龙铁道大学 scripts=CJK”random-looking name “H=3.78”TLD with a high abuse rate “icu”
Mediumayorado.icuscore 28· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “fidelity”
Mediumfastpays.icuscore 28· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “chatgpt”
Mediumhlyai.icuscore 28· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “chatgpt”
Mediumjojipen.icuscore 28· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “fidelity”
Mediumvefiyek.icuscore 28· active website
TLD with a high abuse rate “icu”brand in page title, not in the name “fidelity”
Mediumviatetiyqviteta.icuscore 28· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
Mediumxguzxc.icuscore 28· blocked the probe
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
Mediumxn----0n7ay0jmzjtydgvtm1f.icuscore 26· no DNS
punycode name “吴健民-梁广宇 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--7etz0mg90b.icuscore 26· no web server
punycode name “扫尘见 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--djry88b.icuscore 26· no web server
punycode name “北极 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--dvs.icuscore 26· no DNS
punycode name “妄 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--fiqvij31a01b6w1etx7b.icuscore 26· no DNS
punycode name “奶龙第二中学 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--fiqx8ytpbr55ay9al75p.icuscore 26· empty page
punycode name “浙江奶龙中学 scripts=CJK”TLD with a high abuse rate “icu”
Mediumxn--tjb-1n9dt12gzumm7o22hcmd.icuscore 26· empty page
punycode name “tjb电竞人气投票 scripts=CJK/LATIN”TLD with a high abuse rate “icu”
Mediumxn--viqa.icuscore 26· active website
punycode name “丽丽 scripts=CJK”TLD with a high abuse rate “icu”

Same data as JSON: /api/zone/risk?day=2026-10-17&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.