brand in the name “vanguard”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”brand name and brand-styled page “vanguard”
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”brand name and brand-styled page “vanguard”
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
brand in the name “tiktok”brand name at a retail registrar “Name.com, Inc.”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 66%. An opinion, not a finding.
brand in the name “robinhood”brand name at a retail registrar “Name.com, Inc.”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 78%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
Model opinion: looks benign, confidence 89%. An opinion, not a finding.
brand in the name “onedrive”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 70%. An opinion, not a finding.
brand in the name “kakao”brand name at a retail registrar “Gabia, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
one-letter brand typo “openapi≈openai”TLD with a high abuse rate “buzz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “ebay”brand name at a retail registrar “Tucows Domains Inc.”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “strike≈stripe”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
punycode name “สุดปัง-88 scripts=THAI”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “128738-coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.
brand in the name “microsoft”brand plus digits “175936-microsoft”random-looking name “H=3.77”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: suspicious (target: Microsoft), confidence 72%. An opinion, not a finding.
brand in the name “costco”lure words (login, verify, secure…) “member”very long name “29”brand plus digits “2026costcoexecutive-member2fa”+1 more
Model opinion: suspicious (target: Costco), confidence 72%. An opinion, not a finding.
brand in the name “shopify”many hyphens “3”brand plus digits “20pnmg-uq-myshopify-com”random-looking name “H=3.78”+2 more
Model opinion: looks like abuse (target: Shopify), confidence 82%. An opinion, not a finding.
brand in the name “shopify”brand plus digits “20pnmg-uq-myshopify”random-looking name “H=3.73”brand name at a retail registrar “Namify Domains Inc”+1 more
Model opinion: looks like abuse (target: Shopify), confidence 72%. An opinion, not a finding.
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand plus digits “227281-trustwallet”brand name at a retail registrar “Web Commerce Communications Limited dba ”+1 more
Model opinion: looks like phishing (target: Trust Wallet), confidence 62%. An opinion, not a finding.
brand in the name “facebook”brand plus digits “322-facebook”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: Facebook), confidence 62%. An opinion, not a finding.
brand in the name “google”brand plus digits “616785google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “732329coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand plus digits “827112-trustwallet”brand name at a retail registrar “Web Commerce Communications Limited dba ”+1 more
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand plus digits “827281-trustwallet”brand name at a retail registrar “Web Commerce Communications Limited dba ”+1 more
brand in the name “coinbase”brand plus digits “902343coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “coinbase”brand plus digits “992873coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “icloud”brand plus digits “a1-icloud”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “shopify”lure words (login, verify, secure…) “access”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “microsoft”lure words (login, verify, secure…) “access,authenticate,portal,signin”very long name “58”TLD with a high abuse rate “xyz”+1 more
brand spelled with digits “acct-goog1e→google”brand plus digits “acct-goog1e”brand name on a rarely-seen nameserver “intelliwire.net”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “adobe”lure words (login, verify, secure…) “update”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “airbnb”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “airbnb”form on a brand-styled page “has_form”
brand in the name “office365”lure words (login, verify, secure…) “alert”brand plus digits “alert-office365”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “usps”lure words (login, verify, secure…) “alert,delivery”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “usps”lure words (login, verify, secure…) “alert,delivery”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “usps”lure words (login, verify, secure…) “alert,delivery”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “alipay”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”identical page on many newborns “491 identical pages”+1 more
Model opinion: looks like abuse (target: Alipay), confidence 76%. An opinion, not a finding.
brand in the name “gmail”lure words (login, verify, secure…) “account,accounts”brand plus digits “allaccountsgmail24”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “amazon”TLD with a high abuse rate “icu”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand spelled with digits “app1e-af→apple”brand plus digits “app1e-af”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: looks like abuse (target: Apple), confidence 76%. An opinion, not a finding.
brand spelled with digits “app1e-jq→apple”brand plus digits “app1e-jq”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “apple”brand plus digits “apple-icb0”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-icb1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-icb2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-ick0”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-ick1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-ick2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-ick3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-ick4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-ick5”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
brand in the name “apple”brand plus digits “apple-ick6”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more