one-letter brand typo “docssign≈docusign”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”page asks for credentials “verify your identity”+1 more
Model opinion: looks like phishing (target: Microsoft), confidence 97%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+3 more
Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+3 more
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+3 more
Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+3 more
Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+3 more
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
ambiguous brand word “tesla”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+4 more
Model opinion: looks like a scam (target: Tesla), confidence 94%. An opinion, not a finding.
brand in the name “starlink”brand plus digits “starlink4dyes”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+3 more
Model opinion: looks like abuse, confidence 92%. An opinion, not a finding.
brand in the name “wordpress”brand plus digits “test4wordpress”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”+2 more
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “starlink”brand plus digits “starlink4don”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+3 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+2 more
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “robinhood”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”page impersonates a brand “MetaMask”+1 more
Model opinion: looks like a scam, confidence 63%. An opinion, not a finding.
Criticalarame.sitescore 80echoes aramex· active website one-letter brand typo “arame≈aramex”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “West263 International Limited”brand in page title, not in the name “nationwide”+1 more
Model opinion: looks like phishing (target: Joe Gambino's Bakery), confidence 60%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name and brand-styled page “roblox”+1 more
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “starlink”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+2 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “wordpress”brand plus digits “wordpress-canary-ecommerce2”TLD with a high abuse rate “xyz”brand name at a retail registrar “HOSTINGER operations, UAB”+2 more
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand in the name “roblox”brand plus digits “mm2ofthelocustroblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “ebay”lure words (login, verify, secure…) “service”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”+1 more
Model opinion: looks benign, confidence 68%. An opinion, not a finding.
brand in the name “roblox”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “roblox”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
Criticalbbvaes.icuscore 70echoes bbva· active website brand in the name “bbva”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”+1 more
Model opinion: suspicious (target: BBVA), confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “xyz”page impersonates a brand “netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.
page asks for credentials “log in to your account”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.
one-letter brand typo “sterling≈starling”TLD with a high abuse rate “cam”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
Criticalwchat.lolscore 68echoes wechat· active website one-letter brand typo “wchat≈wechat”TLD with a high abuse rate “lol”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 66%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “xyz”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks like a scam (target: Robinhood), confidence 72%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “sharepoint”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”page impersonates a brand “Microsoft 365”+1 more
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “etsy”TLD with a high abuse rate “cfd”brand name at a retail registrar “NameMart Pte. Ltd.”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: ManyPets), confidence 88%. An opinion, not a finding.
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Name.com, Inc.”brand in page title, not in the name “apple”
Model opinion: looks like phishing (target: TikTok), confidence 75%. An opinion, not a finding.
lure words (login, verify, secure…) “delivery,service,services”page asks for credentials “login to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 55%. An opinion, not a finding.
brand in the name “hulu”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “robinhood”
Model opinion: looks like a scam (target: Robinhood), confidence 76%. An opinion, not a finding.
brand in the name “telegram”TLD with a high abuse rate “top”brand name at a retail registrar “PDR Ltd.”brand name and brand-styled page “telegram”
Model opinion: looks like abuse (target: Telegram), confidence 72%. An opinion, not a finding.
one-letter brand typo “bluecost≈bluehost”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”form submits over plain HTTP “http://bluecost.cloud/”
Model opinion: looks benign, confidence 78%. An opinion, not a finding.
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: TuBoleta (Tuboleta / viagogo)), confidence 85%. An opinion, not a finding.
page impersonates a brand “FedEx”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Model opinion: looks like a scam (target: Garde-Malade (garde-malade-dr.it.com)), confidence 79%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
page impersonates a brand “USPS”brand in page title, not in the name “usps”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: USPS), confidence 78%. An opinion, not a finding.
one-letter brand typo “webchat≈wechat”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.