Highfinance.boxscore 55echoes binance· redirects elsewhere one-letter brand typo “finance≈binance”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more
Model opinion: looks benign, confidence 91%. An opinion, not a finding.
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”+3 more
Model opinion: looks like abuse (target: Apple), confidence 68%. An opinion, not a finding.
one-letter brand typo “whatapp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “West263 International Limited”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “xyz”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “etsy”lure words (login, verify, secure…) “service,services”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: unreachable when judged, confidence 78%. An opinion, not a finding.
brand in the name “google”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “google”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “google”brand name at a retail registrar “Dynadot LLC.”brand name at a watch-list registrar “Dynadot LLC.”brand name and brand-styled page “google”+1 more
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “metamask”lure words (login, verify, secure…) “help”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “gmail”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “Synergy Wholesale Accreditations Pty Ltd”identical page on many newborns “262 identical pages”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
one-letter brand typo “finance≈binance”TLD with a high abuse rate “bid”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: looks like phishing (target: Tether Gold (XAUT) / Crypto.com), confidence 82%. An opinion, not a finding.
brand in the name “ledger”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “CV. Rumahweb Indonesia”
brand in the name “ledger”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “CV. Rumahweb Indonesia”
brand in the name “ledger”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “CV. Rumahweb Indonesia”
brand in the name “hulu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”brand in page title, not in the name “cloudflare”
brand spelled with digits “ic1oud-app1e→apple”brand plus digits “ic1oud-app1e”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “twilio”lure words (login, verify, secure…) “support”brand plus digits “id4631384-support-twilio”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “zelle”TLD with a high abuse rate “autos”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
brand in the name “intuit”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”brand name and brand-styled page “intuit”
Model opinion: looks like abuse (target: Intuit), confidence 70%. An opinion, not a finding.
brand in the name “ionos”brand plus digits “josedisableionos001”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”+1 more
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “ionos”brand plus digits “josedisableionos003”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”+1 more
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”many hyphens “4”very long name “28”TLD with a high abuse rate “top”+2 more
brand in the name “ledger”lure words (login, verify, secure…) “portal”TLD with a high abuse rate “cam”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: looks like abuse (target: Ledger), confidence 78%. An opinion, not a finding.
brand in the name “ledger”lure words (login, verify, secure…) “update”brand plus digits “ledger-update2026”brand name behind Cloudflare “cloudflare.com”+3 more
brand in the name “lineme”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
brand in the name “google”lure words (login, verify, secure…) “account,login”many hyphens “3”very long name “30”+3 more
one-letter brand typo “whatapp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “West263 International Limited”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: WhatsApp), confidence 72%. An opinion, not a finding.
brand in the name “metamask”lure words (login, verify, secure…) “customer,customers,support”brand name at a retail registrar “Wix.com Ltd.”
brand in the name “microsoft”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
one-letter brand typo “mobile≈tmobile”brand plus digits “mobile-diana4d”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
one-letter brand typo “cloud≈icloud”brand plus digits “model-cloud-7”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+2 more
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
brand in the name “whatsapp”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”form on a brand-styled page “has_form”brand name redirects elsewhere “yahoo.com”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “whatsapp”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”form on a brand-styled page “has_form”brand name redirects elsewhere “yahoo.com”
Model opinion: looks like abuse (target: WhatsApp), confidence 58%. An opinion, not a finding.
brand in the name “robinhood”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “cloudflare”
Model opinion: suspicious (target: Robinhood), confidence 55%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “security”TLD with a high abuse rate “click”brand name at a retail registrar “CommuniGal Communication Ltd.”
brand in the name “revolut”lure words (login, verify, secure…) “pay”many hyphens “4”TLD with a high abuse rate “click”+4 more
Model opinion: looks like abuse (target: Revolut), confidence 78%. An opinion, not a finding.
brand in the name “whatsapp”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”form on a brand-styled page “has_form”brand name redirects elsewhere “yahoo.com”
Model opinion: suspicious (target: WhatsApp), confidence 60%. An opinion, not a finding.
brand in the name “whatsapp”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”form on a brand-styled page “has_form”brand name redirects elsewhere “yahoo.com”
Model opinion: suspicious (target: WhatsApp), confidence 62%. An opinion, not a finding.
brand in the name “amazon”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
brand in the name “amazon”lure words (login, verify, secure…) “refund”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “google”brand name at a retail registrar “CV. Rumahweb Indonesia”brand name and brand-styled page “google”brand name redirects elsewhere “gitlab.io”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “revolut”lure words (login, verify, secure…) “alert,alerts”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “robinhood”brand plus digits “robinhood-589232”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
brand in the name “robinhood”lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “xyz”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: looks like abuse (target: Robinhood), confidence 68%. An opinion, not a finding.
brand in the name “santander”lure words (login, verify, secure…) “auth”brand name on a rarely-seen nameserver “swissrdp.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
brand in the name “scotiabank”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.
brand in the name “apple”lure words (login, verify, secure…) “id,secure”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OwnRegistrar, Inc.”
brand in the name “microsoft”lure words (login, verify, secure…) “login,secure”brand name at a retail registrar “Network Solutions, LLC”
brand in the name “booking”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more