lure words (login, verify, secure…) “track”page impersonates a brand “USPS”brand in page title, not in the name “usps”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “zelle”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 94%. An opinion, not a finding.
brand in the name “whatsapp”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.
brand in the name “tmobile”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand in page title, not in the name “apple”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “chatgpt”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 58%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88area”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88indo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88pro”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”form on a brand-styled page “has_form”identical page on many newborns “20 identical pages”+1 more
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “portal”brand name on a rarely-seen nameserver “iaasdns.com”brand name at a retail registrar “NameSilo, LLC”+1 more
one-letter brand typo “instragram≈instagram”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”identical page on many newborns “41 identical pages”
Model opinion: looks like abuse (target: Instagram), confidence 72%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 45%. An opinion, not a finding.
brand in the name “dropbox”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1375 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “oflice365≈office365”brand plus digits “oflice365”brand name at a retail registrar “Ascio Technologies, Inc. Danmark - Filia”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Microsoft), confidence 80%. An opinion, not a finding.
punycode name “adobésecure scripts=LATIN”brand in the name “adobe”lure words (login, verify, secure…) “secure”brand name at a retail registrar “HOSTINGER operations, UAB”+1 more
brand in the name “cloudflare”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “cloudflare”
Model opinion: looks like phishing (target: Cloudflare), confidence 82%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand name and brand-styled page “roblox”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
one-letter brand typo “specstrum≈spectrum”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”brand name redirects elsewhere “flme.ai”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
one-letter brand typo “colnbase≈coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “xfinity”brand name at a retail registrar “Network Solutions, LLC”identical page on many newborns “125 identical pages”
Model opinion: looks like abuse (target: Xfinity (Comcast)), confidence 82%. An opinion, not a finding.
page asks for credentials “Login to your account”login form “has_form+login words”
Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.
brand in the name “microsoft”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
page asks for credentials “Login to your account”login form “has_form+login words”
Model opinion: looks like a scam, confidence 76%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
lure words (login, verify, secure…) “official”brand in page title, not in the name “steam”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.
brand in the name “lineme”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
many hyphens “3”very long name “29”brand in page title, not in the name “hostinger”identical page on many newborns “86 identical pages”
brand in page title, not in the name “bradesco”form on a brand-styled page “has_form”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “ledger”form on a brand-styled page “has_form”
brand in page title, not in the name “gmail”form on a brand-styled page “has_form”
brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
brand in page title, not in the name “medicare”form on a brand-styled page “has_form”
brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in the name “binance”brand name at a retail registrar “GoDaddy.com, LLC”
brand in page title, not in the name “microsoft”form on a brand-styled page “has_form”
brand in page title, not in the name “gmail”form on a brand-styled page “has_form”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “booking”form on a brand-styled page “has_form”