brand in the name “slack”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
brand in the name “adobe”brand name at a retail registrar “DEVEXPANSE LTD d/b/a Regery.com”brand name at a watch-list registrar “DEVEXPANSE LTD d/b/a Regery.com”
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “verizon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “intuit”brand name on a rarely-seen nameserver “jethosting.com”brand name at a retail registrar “eNom, LLC”
brand in the name “intuit”brand name on a rarely-seen nameserver “jethosting.com”brand name at a retail registrar “eNom, LLC”
brand in the name “workday”brand name at a retail registrar “Gname 371 Inc”brand name at a watch-list registrar “Gname 371 Inc”
brand in the name “stripe”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Fewmoretaps OU d/b/a Trustname.com”
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “tmobile”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “tiktok”brand name on a rarely-seen nameserver “krystal.uk”brand name at a retail registrar “Netistrar Limited”
brand in the name “vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “telegram”brand name on a rarely-seen nameserver “hostingdunyam.net”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.S.”
brand in the name “twitter”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “twitter”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “twitter”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “usaa”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Chengdu West Dimension Digital Technolog”
brand in the name “usps”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “ebay”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “tmobile”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
ambiguous brand word “ledger”lure words (login, verify, secure…) “login”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “whatsapp”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gransy, s.r.o.”
brand in the name “adobe”brand name at a retail registrar “DEVEXPANSE LTD d/b/a Regery.com”brand name at a watch-list registrar “DEVEXPANSE LTD d/b/a Regery.com”
brand in the name “anthropic”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “xbox”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “xfinity”brand name at a retail registrar “Gname 076 Inc”brand name at a watch-list registrar “Gname 076 Inc”
brand in the name “shopee”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
brand in the name “hulu”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
lure words (login, verify, secure…) “claim”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Fewmoretaps OU d/b/a Trustname.com”
one-letter brand typo “layada≈lazada”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
one-letter brand typo “ledge≈ledger”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
very long name “28”TLD with a high abuse rate “click”brand in page title, not in the name “hostinger”identical page on many newborns “104 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Beget LLC”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.
one-letter brand typo “booklng≈booking”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OwnRegistrar, Inc.”
one-letter brand typo “whatapp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “West263 International Limited”
one-letter brand typo “strike≈stripe”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”