brand in the name “tmobile”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “namecheap”
Model opinion: looks like phishing (target: Salam Mobile (Saudi Arabia)), confidence 82%. An opinion, not a finding.
page impersonates a brand “HMRC”brand in page title, not in the name “hmrc”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
brand in the name “ionos”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
punycode name “нано-банана scripts=CYRILLIC”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
one-letter brand typo “cooking≈booking”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “881 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2036 identical pages”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
one-letter brand typo “awazon≈amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “tmobile”brand plus digits “365fastmobilenotary”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “poweregypt2024gmail”brand name at a retail registrar “Network Solutions, LLC”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “stripe”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: Statewide Stripes (employer job-site / workforce scheduling portal)), confidence 76%. An opinion, not a finding.
brand in the name “bradesco”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: Banco Bradesco), confidence 82%. An opinion, not a finding.
brand in the name “amazon”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more
Model opinion: looks like abuse (target: Amazon), confidence 62%. An opinion, not a finding.
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: suspicious, confidence 65%. An opinion, not a finding.
page asks for credentials “your account will be suspended”login form “has_form+login words”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “instagram”brand name on a rarely-seen nameserver “net.tr”brand name at a retail registrar “İsimtescil Bilişim A.Ş.”
brand in the name “fedex”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious (target: FedEx), confidence 65%. An opinion, not a finding.
brand in the name “docusign”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “outlook”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “docusign”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
page asks for credentials “login to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name on a rarely-seen nameserver “huaweicloud-dns.cn”brand name at a retail registrar “Xin Net Technology Corporation”
one-letter brand typo “vasguard≈vanguard”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”