Flagged newborn domains, Thursday, August 27, 2026

20 names at tier low or above in .ink, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Highcloudicloud.inkscore 50echoes icloud
brand in the nameicloudbrand name behind Cloudflarecloudflare.combrand name at a retail registrarSav.com LLCbrand name at a watch-list registrarSav.com LLC
Highcooking.inkscore 42echoes booking· no DNS
one-letter brand typocooking≈bookingbrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Lowcasinoconbono.inkscore 22· active website
page impersonates a brandPayPal
Lowaura88.inkscore 20· active website
brand in page title, not in the nametelegram
Lowbetinjapr.inkscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowephphatha.inkscore 20· active website
brand in page title, not in the namenamecheap
Lowepsteinfiles.inkscore 20· other
brand in page title, not in the namecloudflare
Lowjun88ka.inkscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowjun88kb.inkscore 20· blocked the probe
brand in page title, not in the namecloudflare
Lowkalagadi.inkscore 20· active website
brand in page title, not in the namenamecheap
Lowlovelyco.inkscore 20· active website
brand in page title, not in the namewhatsapp
Lowwbahiso.inkscore 20· blocked the probe
brand in page title, not in the namecloudflare
punycode nameจ๊วด888 scripts=THAI
Lowxn--b9wx86d.inkscore 18· redirects elsewhere
punycode name资源 scripts=CJK
Lowxn--od1ba225g1yu.inkscore 18· active website
punycode name누누티비 scripts=HANGUL
Lowxn--r70a60bx1n.inkscore 18· no DNS
punycode name腾讯荐 scripts=CJK
Lowgostarbet388.inkscore 14· active website
login formhas_form+login words
lure words (login, verify, secure…)payment,secure
many hyphens3very long name29
many hyphens3very long name32

Same data as JSON: /api/zone/risk?day=2026-08-27&tier=low. Screenshots and the model's reasoning are on each domain's evidence page.