An unregistered domain can still be an IoC especially when found through e.g. payload analysis.