brand in the name “binance”lure words (login, verify, secure…) “pay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Fewmoretaps OU d/b/a Trustname.com”
brand in the name “tiktok”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”identical page on many newborns “40 identical pages”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
brand in the name “google”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “google”
Model opinion: looks like phishing (target: Google), confidence 75%. An opinion, not a finding.
lure words (login, verify, secure…) “verify”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious (target: Google), confidence 75%. An opinion, not a finding.
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: suspicious, confidence 65%. An opinion, not a finding.
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
page asks for credentials “Login to your account”
punycode name “开云体育 scripts=CJK”random-looking name “H=3.77”
page impersonates a brand “Paypal”
brand in the name “adobe”brand name behind Cloudflare “cloudflare.com”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “booking”
brand in page title, not in the name “uber”
brand in page title, not in the name “telegram”
brand in page title, not in the name “telegram”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
brand in page title, not in the name “wordpress”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “chatgpt”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “spectrum”
brand in page title, not in the name “telegram”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “google”
brand in page title, not in the name “telegram”
brand in page title, not in the name “tiktok”
lure words (login, verify, secure…) “login”login form “has_form+login words”
brand in page title, not in the name “tiktok”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “robinhood”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “telegram”
brand in page title, not in the name “whatsapp”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “uber”
brand in page title, not in the name “telegram”
brand in page title, not in the name “robinhood”