brand spelled with digits “sc88va→bbva”brand plus digits “sc88va”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “starlink”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “123 identical pages”
Model opinion: suspicious (target: Starlink (SpaceX)), confidence 60%. An opinion, not a finding.
brand in the name “twitter”lure words (login, verify, secure…) “track”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
one-letter brand typo “dashapp≈cashapp”brand name at a retail registrar “Squarespace Domains LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
one-letter brand typo “slotify≈spotify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “stride≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “bestbuy”brand name on a rarely-seen nameserver “domainparkingserver.net”brand name at a retail registrar “Bluehost Inc.”
brand in the name “ebay”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “cloudflare”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “outlook”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
lure words (login, verify, secure…) “tax”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “trezor”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
one-letter brand typo “finance≈binance”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
one-letter brand typo “trezoir≈trezor”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “revolut”brand name at a retail registrar “DropCatch.com 940 LLC”identical page on many newborns “157 identical pages”brand name redirects elsewhere “dropcatch.com”