Highscore 58 · flagged Friday, August 28, 2026

1xbet-mobile.ink

Appeared in the .ink zone on Friday, August 28, 2026; by the end of that day the census found active website about gambling & casino. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: tmobile
+30
brand plus digits
matched: 1xbet-mobile
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: Spaceship, Inc.
+8
brand name at a watch-list registrar
matched: Spaceship, Inc.
+6
Registrar
Spaceship, Inc.
Nameserver provider
Nameservers
rodney.ns.cloudflare.com, sonia.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
1xbet Türkiye giriş rehberi: Güncel bilgiler ve adımlar
Has a form
no
Brand echoed
tmobile

Model opinions

Second opinionlooks like abusetarget: 1xBetconfidence 72%· claude-opus-5

Freshly registered brand-squat (1xbet-mobile.ink) reproducing the 1xBet logo, colour scheme and 'Giriş / Kayıt olmak' calls-to-action as a Turkish-language mirror/affiliate gateway; no form is present so it is not credential capture, but it trades on a brand it does not own to funnel Turkish users into gambling that is unlicensed there.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

Domain 1xbet-mobile.ink is a brand-squat on the 1xBet gambling brand with a misleading subdomain-like structure (.ink TLD). The page presents itself as a guide/portal to 1xBet's Turkish service with login buttons and casino content, but is hosted on an attacker-controlled domain unrelated to 1xBet's legitimate infrastructure. This is a typical affiliate or redirect squat designed to capture traffic and potentially monetize referrals or harvest user data, not a direct phishing page but clear abus

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, August 28, 2026

Screenshot of 1xbet-mobile.ink taken by the zone census on 2026-08-28

Same data as JSON: /api/zone/domain/1xbet-mobile.ink. This page is not indexed by search engines and does not link to the site it describes.