lure words (login, verify, secure…) “track”page impersonates a brand “USPS”brand in page title, not in the name “usps”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “zelle”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 94%. An opinion, not a finding.
brand in the name “whatsapp”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 66%. An opinion, not a finding.
brand in the name “tmobile”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand in page title, not in the name “apple”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “chatgpt”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 58%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88area”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88indo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “adobe”brand plus digits “adobet88pro”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”form on a brand-styled page “has_form”identical page on many newborns “20 identical pages”+1 more
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “portal”brand name on a rarely-seen nameserver “iaasdns.com”brand name at a retail registrar “NameSilo, LLC”+1 more
one-letter brand typo “instragram≈instagram”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”identical page on many newborns “41 identical pages”
Model opinion: looks like abuse (target: Instagram), confidence 72%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 45%. An opinion, not a finding.
brand in the name “dropbox”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1375 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “oflice365≈office365”brand plus digits “oflice365”brand name at a retail registrar “Ascio Technologies, Inc. Danmark - Filia”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Microsoft), confidence 80%. An opinion, not a finding.
punycode name “adobésecure scripts=LATIN”brand in the name “adobe”lure words (login, verify, secure…) “secure”brand name at a retail registrar “HOSTINGER operations, UAB”+1 more
brand in the name “cloudflare”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “cloudflare”
Model opinion: looks like phishing (target: Cloudflare), confidence 82%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand name and brand-styled page “roblox”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
one-letter brand typo “specstrum≈spectrum”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”brand name redirects elsewhere “flme.ai”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
one-letter brand typo “colnbase≈coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “xfinity”brand name at a retail registrar “Network Solutions, LLC”identical page on many newborns “125 identical pages”
Model opinion: looks like abuse (target: Xfinity (Comcast)), confidence 82%. An opinion, not a finding.
page asks for credentials “Login to your account”login form “has_form+login words”
Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.
brand in the name “microsoft”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
page asks for credentials “Login to your account”login form “has_form+login words”
Model opinion: looks like a scam, confidence 76%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
lure words (login, verify, secure…) “official”brand in page title, not in the name “steam”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.
brand in the name “lineme”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
many hyphens “3”very long name “29”brand in page title, not in the name “hostinger”identical page on many newborns “86 identical pages”