brand spelled with digits “137sy→etsy”brand plus digits “137sy”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: suspicious (target: Etsy), confidence 72%. An opinion, not a finding.
one-letter brand typo “finance≈binance”brand plus digits “4c-personal-finance”TLD with a high abuse rate “icu”brand name at a retail registrar “HOSTINGER operations, UAB”+1 more
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand in the name “wordpress”brand plus digits “52wordpress”brand name at a retail registrar “DropCatch.com 1205 LLC”identical page on many newborns “162 identical pages”+1 more
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “737281coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “758343coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.
brand in the name “robinhood”brand plus digits “76597-robinhood”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious (target: Robinhood), confidence 72%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “8-icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”+1 more
brand in the name “intuit”lure words (login, verify, secure…) “account,support”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “intuit”lure words (login, verify, secure…) “account,support”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “adobe”lure words (login, verify, secure…) “update”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “adobe”brand plus digits “adobet88area”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88area”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88area”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88area”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88area”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88indo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88indo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88indo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 62%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88indo”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88pro”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88pro”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88pro”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “icloud”TLD with a high abuse rate “work”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Chengdu West Dimension Digital Technolog”+2 more
Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.
brand in the name “amazon”lure words (login, verify, secure…) “claim,claims”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “amazon”lure words (login, verify, secure…) “portal”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “anthropic”TLD with a high abuse rate “download”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
ambiguous brand word “apple”lure words (login, verify, secure…) “login”many hyphens “5”TLD with a high abuse rate “click”+3 more
ambiguous brand word “apple”lure words (login, verify, secure…) “login”many hyphens “5”TLD with a high abuse rate “rest”+3 more
one-letter brand typo “linkedln≈linkedin”lure words (login, verify, secure…) “invoice”brand name at a retail registrar “Tucows Domains Inc.”
one-letter brand typo “aspectrum≈spectrum”TLD with a high abuse rate “xyz”brand name at a retail registrar “Automattic Inc.”brand name and brand-styled page “spectrum”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “auspost”lure words (login, verify, secure…) “auth”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “paypal”lure words (login, verify, secure…) “auth,secure”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+2 more
Model opinion: looks like abuse (target: PayPal), confidence 76%. An opinion, not a finding.
one-letter brand typo “best7buy≈bestbuy”brand plus digits “best7buy”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “support”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “robinhood”TLD with a high abuse rate “fun”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”+1 more
Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.
brand in the name “booking”lure words (login, verify, secure…) “id”many hyphens “3”very long name “30”+3 more
brand in the name “booking”lure words (login, verify, secure…) “id”many hyphens “3”very long name “30”+3 more
brand in the name “booking”lure words (login, verify, secure…) “id”many hyphens “3”very long name “30”+3 more
brand in the name “booking”lure words (login, verify, secure…) “confirm,confirmation”brand plus digits “booking-confirmation0926app”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “booking”lure words (login, verify, secure…) “secure”TLD with a high abuse rate “autos”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “shopify”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “canadapost”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: looks like abuse (target: Canada Post), confidence 72%. An opinion, not a finding.
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”brand name and brand-styled page “whatsapp”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”form on a brand-styled page “has_form”identical page on many newborns “20 identical pages”+1 more
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand spelled with digits “code365team→steam”brand plus digits “code365team”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”brand name on a rarely-seen nameserver “alexhost.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
one-letter brand typo “strike≈stripe”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Namecheap Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “track”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “usaa”lure words (login, verify, secure…) “bonus”TLD with a high abuse rate “cfd”brand name on a rarely-seen nameserver “privlayer.com”+2 more
Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.