brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”identical page on many newborns “287 identical pages”
one-letter brand typo “cloud≈icloud”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
brand in the name “bybit”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3394 identical pages”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “555 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “tmobile”lure words (login, verify, secure…) “service”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
one-letter brand typo “finance≈binance”brand plus digits “finance-v2”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “1663 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “shopify”very long name “34”brand plus digits “httpsadminshopifycomstoregrw0yx-2c”brand name at a retail registrar “Namify Domains Inc”+1 more
Model opinion: looks like phishing (target: Shopify), confidence 75%. An opinion, not a finding.
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
brand in the name “adobe”lure words (login, verify, secure…) “service”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CV. Rumahweb Indonesia”
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3394 identical pages”
Model opinion: looks like abuse (target: Roblox), confidence 68%. An opinion, not a finding.
brand in the name “ebay”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “IONOS SE”
one-letter brand typo “finance≈binance”brand name at a retail registrar “Name.com, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 83%. An opinion, not a finding.
brand in the name “santander”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “DomainRegistry.com LLC”
brand in the name “spotify”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1190 identical pages”
Model opinion: looks like abuse (target: Spotify), confidence 72%. An opinion, not a finding.
brand in the name “spotify”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1190 identical pages”
Model opinion: looks like abuse (target: Spotify), confidence 68%. An opinion, not a finding.
brand in the name “starlink”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3394 identical pages”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
brand in the name “starlink”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3394 identical pages”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
brand in the name “starlink”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3394 identical pages”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “telegram”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1190 identical pages”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “etsy”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “Megazone Corp., dba HOSTING.KR”brand name and brand-styled page “amazon”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “chatgpt”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “chatgpt”
Model opinion: looks benign, confidence 87%. An opinion, not a finding.
brand in the name “wordpress”brand name at a retail registrar “OVH sas”brand name and brand-styled page “wordpress”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “google”brand plus digits “118253-google”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
brand in the name “coinbase”brand plus digits “93255-coinbase”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
brand in the name “cashapp”brand plus digits “b9cashapp”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “cashapp”TLD with a high abuse rate “top”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “google”brand plus digits “google898”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “google”brand plus digits “google92”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
TLD with a high abuse rate “xyz”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”form submits over plain HTTP “http://hakimsjo.xyz/”
Model opinion: looks benign, confidence 94%. An opinion, not a finding.
page asks for credentials “Login to your account”page impersonates a brand “Netflix”
Model opinion: looks like abuse, confidence 93%. An opinion, not a finding.
page asks for credentials “Login to your account”page impersonates a brand “Netflix”
Model opinion: looks like abuse, confidence 94%. An opinion, not a finding.
brand in the name “icloud”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “coinbase”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “itau”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: looks like phishing (target: Itaú Unibanco), confidence 72%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “marmorariaportoseguro1gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Highmcloud.fyiscore 52echoes icloud· boilerplate page one-letter brand typo “mcloud≈icloud”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1190 identical pages”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
one-letter brand typo “paystation≈playstation”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3394 identical pages”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
one-letter brand typo “paystation≈playstation”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3394 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “shopify”brand plus digits “shopify000”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “shopify”brand plus digits “shopify111”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “shopify”brand plus digits “shopify222”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “shopify”brand plus digits “shopify333”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “shopify”brand plus digits “shopify444”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “shopify”brand plus digits “shopify555”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “shopify”brand plus digits “shopify666”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “shopify”brand plus digits “shopify777”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “shopify”brand plus digits “shopify999”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”