TLD with a high abuse rate “icu”page impersonates a brand “Binance”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-datenschutz24”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious, confidence 45%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-datenschutz365”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-sicherheit24”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “etsy”brand plus digits “etsy-ordrnotify26185”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+1 more
many hyphens “3”very long name “32”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”+1 more
many hyphens “4”very long name “31”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”+1 more
brand in the name “sharepoint”lure words (login, verify, secure…) “verification”very long name “32”TLD with a high abuse rate “icu”+3 more
Model opinion: looks like phishing (target: Microsoft SharePoint), confidence 75%. An opinion, not a finding.
brand in the name “anthropic”TLD with a high abuse rate “icu”brand name on a rarely-seen nameserver “cnmsn.com”brand name at a retail registrar “CNOBIN INFORMATION TECHNOLOGY LIMITED”
Model opinion: looks like phishing (target: Anthropic (Claude)), confidence 97%. An opinion, not a finding.
lure words (login, verify, secure…) “customer”TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Shein), confidence 72%. An opinion, not a finding.
brand in the name “twitter”brand plus digits “betasustwitter-87en”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “docusign”very long name “35”TLD with a high abuse rate “icu”brand name at a retail registrar “Cloud DNS Ltd”
very long name “30”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Polymarket), confidence 76%. An opinion, not a finding.
TLD with a high abuse rate “icu”brand in page title, not in the name “hubspot”form on a brand-styled page “has_form”
Model opinion: suspicious (target: HubSpot), confidence 72%. An opinion, not a finding.
punycode name “你的胆子真是肥嘟嘟的 scripts=CJK”very long name “33”random-looking name “H=4.16”TLD with a high abuse rate “icu”
very long name “31”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
punycode name “神秘的花园 scripts=CJK”random-looking name “H=3.68”TLD with a high abuse rate “icu”
TLD with a high abuse rate “icu”page impersonates a brand “PayPal”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”