brand in the name “robinhood”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “robinhood”+1 more
Model opinion: looks like phishing (target: Robinhood), confidence 87%. An opinion, not a finding.
brand in the name “tiktok”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.
brand in the name “tiktok”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 58%. An opinion, not a finding.
brand in the name “google”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Fewmoretaps OU d/b/a Trustname.com”
Model opinion: looks like phishing (target: Google Chrome Web Store / IOTA Foundation), confidence 93%. An opinion, not a finding.
one-letter brand typo “docsign≈docusign”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+1 more
Model opinion: looks like abuse (target: DocuSign), confidence 85%. An opinion, not a finding.
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: looks like phishing (target: Google), confidence 85%. An opinion, not a finding.
brand in the name “slack”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Model opinion: looks benign, confidence 87%. An opinion, not a finding.
brand in the name “ebay”brand name and brand-styled page “ebay”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: eBay), confidence 78%. An opinion, not a finding.
brand in the name “bestbuy”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: Best Buy), confidence 97%. An opinion, not a finding.
brand in the name “hsbc”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: Roblox), confidence 94%. An opinion, not a finding.
brand in the name “etsy”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: RYSE Supplements), confidence 85%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 93%. An opinion, not a finding.
brand in the name “tmobile”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot LLC”+2 more
Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “stripe”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 78%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 87%. An opinion, not a finding.
page impersonates a brand “Paypal”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.
page impersonates a brand “PayPal”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
TLD with a high abuse rate “sbs”page pushes urgent payment “LIMITED TIME OFFER”brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
page impersonates a brand “Binance”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.
punycode name “iptvleverantörer scripts=LATIN”page impersonates a brand “Netflix”brand in page title, not in the name “whatsapp”
Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.
brand in the name “airbnb”brand name on a rarely-seen nameserver “awsdns-56.com”brand name at a retail registrar “Amazon Registrar, Inc.”brand name and brand-styled page “airbnb”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “robinhood”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “robinhood”
Model opinion: looks like a scam, confidence 75%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “vanguard”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand in the name “robinhood”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “robinhood”
Model opinion: looks like a scam, confidence 78%. An opinion, not a finding.
brand in the name “robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CloudFlare, Inc.”brand name and brand-styled page “robinhood”
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
brand in the name “telegram”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “telegram”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “telegram”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”brand name and brand-styled page “telegram”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “booking”brand plus digits “booking-f1-es”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: looks like phishing (target: Formula 1 (F1 Madring – Spanish Grand Prix official ticketing / Fever)), confidence 85%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand plus digits “rajaslot80-cloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Model opinion: looks like abuse, confidence 86%. An opinion, not a finding.
brand in the name “revolut”brand name at a retail registrar “West263 International Limited”form on a brand-styled page “has_form”
Model opinion: looks like a scam (target: Revolution Beauty), confidence 82%. An opinion, not a finding.
one-letter brand typo “starwink≈starlink”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “usaa”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 87%. An opinion, not a finding.
brand spelled with digits “1637sy→etsy”brand plus digits “1637sy”TLD with a high abuse rate “top”brand name at a retail registrar “NameMart Pte. Ltd.”
Model opinion: suspicious (target: Etsy), confidence 72%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “25516-icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: looks like abuse (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “25816-icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: looks like abuse (target: Apple), confidence 68%. An opinion, not a finding.
brand in the name “apple”brand plus digits “433494-apple”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+2 more
Model opinion: looks like abuse (target: Apple), confidence 82%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “543331coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.
brand spelled with digits “735144→tesla”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious (target: Tesla), confidence 65%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “8173581coinbase”random-looking name “H=3.64”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “838721-coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “ledger”lure words (login, verify, secure…) “account,accounts”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “intuit”lure words (login, verify, secure…) “account,accounts,tax”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “facebook”lure words (login, verify, secure…) “account,accounts”brand name on a rarely-seen nameserver “parktons.com”brand name at a retail registrar “Ultahost, Inc.”
brand in the name “intuit”lure words (login, verify, secure…) “account,accounts”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “adobe”lure words (login, verify, secure…) “update”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+3 more