dnwrr.club
Appeared in the .club zone on Tuesday, October 20, 2026; by the end of that day the census found active website about education. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is a self-branded '账号店' (account shop) selling aged Telegram, X/Twitter, Apple ID, Google, WhatsApp and other platform accounts with auto-delivery. That is a bulk account-trafficking storefront that enables spam and fraud, not a page pretending to be Telegram or Apple. Its only form is a GET search posting to itself, not a credential harvest.
This is a marketplace selling stolen or compromised accounts (Telegram, Apple ID, Twitter, Facebook, etc.) for cash, not phishing. While it uses brand logos and names as product categories, it is not impersonating any organisation to capture credentials—it is selling pre-compromised accounts as a black-market goods platform. The sealed-room form (search posting to self) is incidental to the marketplace function, not a credential harvesting scheme.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, October 20, 2026
Same data as JSON: /api/zone/domain/dnwrr.club. This page is not indexed by search engines and does not link to the site it describes.