brand in the name “alipay”brand plus digits “alipay2”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “amazon”brand name at a retail registrar “Namecheap, Inc.”brand name at a watch-list registrar “Namecheap, Inc.”identical page on many newborns “4352 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-find1”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “chatgpt”brand plus digits “chatgpt7”TLD with a high abuse rate “fun”brand name at a retail registrar “Hefei Juming Network Technology Co., Ltd”
brand in the name “itau”very long name “51”brand plus digits “creditoitauenlineaplusf340021badc5f856e6”TLD with a high abuse rate “sbs”+3 more
brand in the name “ebay”brand plus digits “ebaya-tmfg9-hvlysf”TLD with a high abuse rate “cyou”brand name at a retail registrar “July Name Limited”
brand in the name “fidelity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “4352 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “hsbc”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “ebay”brand plus digits “kebaya4dgas”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”+1 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “ebay”brand plus digits “kebaya4dholiday”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”+1 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “ebay”brand plus digits “kebaya4dsavage”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”+1 more
Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.
brand in the name “gmail”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “4352 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “usps”lure words (login, verify, secure…) “delivery”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “usps”lure words (login, verify, secure…) “delivery”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “office365”brand plus digits “moffice365”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “usps”lure words (login, verify, secure…) “delivery”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “amazon”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “4352 identical pages”
Model opinion: looks benign, confidence 83%. An opinion, not a finding.
brand in the name “google”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “4352 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “shopify”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “698 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “tiktok”brand plus digits “tiktokslot88aa”TLD with a high abuse rate “icu”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “tiktok”brand plus digits “tiktokslot88aa”TLD with a high abuse rate “top”brand name at a retail registrar “PDR Ltd.”
brand in the name “uber”brand plus digits “uber-driver7”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “revolut”lure words (login, verify, secure…) “verify”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “OwnRegistrar, Inc.”
brand in the name “itau”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “4352 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “xbox”brand plus digits “xbox360”TLD with a high abuse rate “lol”brand name at a retail registrar “Name.com, Inc.”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “instagram”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “instagram”
Model opinion: looks like a scam, confidence 78%. An opinion, not a finding.
brand in the name “nvidia”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “nvidia”
Model opinion: looks benign, confidence 83%. An opinion, not a finding.
brand in the name “google”brand name at a retail registrar “Squarespace Domains LLC”brand name and brand-styled page “google”
Model opinion: suspicious (target: Google), confidence 56%. An opinion, not a finding.
brand in the name “tiktok”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “tiktok”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “google”brand plus digits “3dgoogle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloud Yuqu LLC”
page asks for credentials “Login to your account”page impersonates a brand “Netflix”
Model opinion: looks like abuse, confidence 95%. An opinion, not a finding.
one-letter brand typo “alpay≈alipay”brand plus digits “alpay-1a0k6-oxlyiy”TLD with a high abuse rate “cyou”brand name at a retail registrar “July Name Limited”
brand in the name “authenticator”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “etsy”TLD with a high abuse rate “cfd”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
brand in the name “stripe”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “vanguard”TLD with a high abuse rate “click”brand name at a retail registrar “Dynadot, LLC”brand name at a watch-list registrar “Dynadot, LLC”
brand in the name “costco”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “navicosoft.com”brand name at a retail registrar “Navicosoft Pty Ltd”
brand in the name “disney”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious (target: Disney), confidence 72%. An opinion, not a finding.
brand in the name “etsy”brand plus digits “etsy0114”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
brand in the name “facebook”TLD with a high abuse rate “lol”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “facebook”TLD with a high abuse rate “work”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “fidelity”brand plus digits “fidelity015”brand name at a retail registrar “GNAME.COM PTE. LTD.”brand name at a watch-list registrar “GNAME.COM PTE. LTD.”
Model opinion: looks like abuse (target: Fidelity Investments), confidence 58%. An opinion, not a finding.
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in the name “google”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “google”brand plus digits “google2oauthx”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “google”TLD with a high abuse rate “date”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “xyz”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in the name “robinhood”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
one-letter brand typo “medicare1≈medicare”brand plus digits “medicare1”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
one-letter brand typo “mobile≈tmobile”many hyphens “5”very long name “32”brand name on a rarely-seen nameserver “siteprotect.com”+1 more