one-letter brand typo “cloud≈icloud”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1140 identical pages”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 72%. An opinion, not a finding.
brand in the name “microsoft”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”brand name and brand-styled page “microsoft”
Model opinion: looks like abuse (target: Microsoft), confidence 62%. An opinion, not a finding.
brand in the name “cloudflare”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
page asks for credentials “Sign in to your account”login form “has_form+login words”form submits over plain HTTP “http://jmc-ims.info/login”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “google”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1140 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
one-letter brand typo “lcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
brand in the name “telegram”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Sav.com, LLC - 13”brand name at a watch-list registrar “Sav.com, LLC - 13”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “instagram”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in page title, not in the name “zoom”form on a brand-styled page “has_form”
brand in page title, not in the name “hostinger”identical page on many newborns “80 identical pages”
brand in the name “google”
many hyphens “3”page impersonates a brand “PayPal”
one-letter brand typo “mobile≈tmobile”
many hyphens “3”brand in page title, not in the name “steam”