Flagged newborn domains, Friday, October 16, 2026

20 names at tier low or above in .club, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highrussian-cooking.clubscore 52echoes booking· active website
one-letter brand typo “cooking≈booking”brand name on a rarely-seen nameserver “regexdomain.com”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highmicrosoftllm.clubscore 44echoes microsoft· not probed yet
brand in the name “microsoft”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
Highwalmart-hkshop.clubscore 44echoes walmart· empty page
brand in the name “walmart”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: looks like phishing (target: Walmart), confidence 90%. An opinion, not a finding.

Highsechat.clubscore 42echoes wechat· empty page
one-letter brand typo “sechat≈wechat”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Model opinion: suspicious, confidence 55%. An opinion, not a finding.

Mediumebemgoogle.clubscore 38echoes google· no DNS
brand in the name “google”brand name at a retail registrar “Global Domain Group LLC”
Mediummill-panel.clubscore 38· redirects elsewhere
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Mediumsisliescort.clubscore 38· redirects elsewhere
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Mediumunlockyourprime.clubscore 26· empty page
lure words (login, verify, secure…) “unlock”brand in page title, not in the name “hostinger”
Lowxn--0tr48cg75asru.clubscore 23· no DNS
punycode name “永和花园 scripts=CJK”random-looking name “H=3.77”
Lowkeonhacai5goal.clubscore 20· server error
brand in page title, not in the name “cloudflare”
Lowmilagro.clubscore 20· active website
brand in page title, not in the name “whatsapp”
Lowsonclub88.clubscore 20· server error
brand in page title, not in the name “cloudflare”
Lowtappi.clubscore 20· active website
brand in page title, not in the name “apple”
Lowxn--u00as5h.clubscore 18· redirects elsewhere
punycode name “薄肌 scripts=CJK”
Lowxn--yus296h.clubscore 18· redirects elsewhere
punycode name “奶蛙 scripts=CJK”
Lowxn--yusy8b07c7t3dqiukim.clubscore 18· redirects elsewhere
punycode name “奶龙师范学院 scripts=CJK”
Lowxn--yusy8bk89htyh.clubscore 18· redirects elsewhere
punycode name “奶龙学院 scripts=CJK”
Lowfuturemembers.clubscore 12· boilerplate page
lure words (login, verify, secure…) “member,members”
Lowmossymembers.clubscore 12· boilerplate page
lure words (login, verify, secure…) “member,members”
Lowreturn-of-kong-megaways-slot.clubscore 10· no web server
many hyphens “4”very long name “28”

Same data as JSON: /api/zone/risk?day=2026-10-16&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.