brand in the name “telegram”lure words (login, verify, secure…) “account”TLD with a high abuse rate “top”brand name on a rarely-seen nameserver “sitechai.com”+2 more
Model opinion: looks like abuse, confidence 76%. An opinion, not a finding.
Criticalwachat.topscore 70echoes wechat· active website one-letter brand typo “wachat≈wechat”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “阿里云计算有限公司”+1 more
Model opinion: looks benign, confidence 78%. An opinion, not a finding.
brand in the name “adobe”lure words (login, verify, secure…) “update”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+1 more
one-letter brand typo “strike≈stripe”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Namecheap Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “onedrive”lure words (login, verify, secure…) “secure”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “wordpress”lure words (login, verify, secure…) “security”TLD with a high abuse rate “top”brand name on a rarely-seen nameserver “frienddns.info”+2 more
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “top”brand name at a retail registrar “PDR Ltd.”identical page on many newborns “118 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
TLD with a high abuse rate “top”page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks like phishing (target: Northstar ERP (corporate order/ERP portal)), confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “top”page asks for credentials “Login to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”brand name at a retail registrar “Dynadot LLC”brand name at a watch-list registrar “Dynadot LLC”
TLD with a high abuse rate “top”page impersonates a brand “Binance”brand in page title, not in the name “binance”
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “top”brand in page title, not in the name “playstation”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 66%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 78%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: NBP Funds (National Bank of Pakistan)), confidence 62%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “whatsapp”TLD with a high abuse rate “top”brand name at a retail registrar “July Name Limited”
brand in the name “tiktok”TLD with a high abuse rate “top”brand name at a retail registrar “阿里云计算有限公司”
one-letter brand typo “bestguy≈bestbuy”TLD with a high abuse rate “top”brand name at a retail registrar “阿里云计算有限公司”
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “top”brand name at a retail registrar “PDR Ltd.”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “official”TLD with a high abuse rate “top”brand in page title, not in the name “onedrive”
punycode name “全球电缆网 scripts=CJK”random-looking name “H=3.84”TLD with a high abuse rate “top”
punycode name “全球電纜網 scripts=CJK”random-looking name “H=3.79”TLD with a high abuse rate “top”
punycode name “奶龙国际 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “top”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “PayPal”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “Netflix”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”page impersonates a brand “PayPal”
TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”login form “has_form+login words”