brand in the name “phantom”many hyphens “3”very long name “42”brand plus digits “phantom-419283756-b37c82fe4c-2fa9c7d3031”+1 more
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
brand in the name “hsbc”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
TLD with a high abuse rate “click”free DNS provider “dnsowl.com”brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “slack”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “7547 identical pages”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “starlink”form on a brand-styled page “has_form”form submits over plain HTTP “http://starlinkhats.store/”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
one-letter brand typo “stride≈stripe”brand name at a retail registrar “Name.com, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 87%. An opinion, not a finding.
brand in the name “usps”brand plus digits “usps-first1”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “7547 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “wordpress”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1913 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “gmail”very long name “34”brand plus digits “5278941239786125397816345278-gmail”random-looking name “H=3.62”+1 more
brand in the name “shopify”many hyphens “3”brand plus digits “5twndg-5b-myshopify-com”random-looking name “H=3.92”+1 more
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “amazon”
Model opinion: looks like abuse, confidence 50%. An opinion, not a finding.
brand in the name “whatsapp”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “whatsapp”
Model opinion: suspicious (target: WhatsApp), confidence 72%. An opinion, not a finding.
brand in the name “bybit”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “bybit”
Model opinion: looks like phishing (target: Bybit), confidence 94%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand name and brand-styled page “roblox”
Model opinion: suspicious (target: Roblox), confidence 60%. An opinion, not a finding.
brand in the name “etsy”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”brand name and brand-styled page “etsy”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “nvidia”brand name at a retail registrar “Squarespace Domains II LLC”brand name and brand-styled page “nvidia”
Model opinion: suspicious (target: NVIDIA), confidence 68%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “xyz”brand name and brand-styled page “robinhood”
Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “fun”brand name and brand-styled page “robinhood”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
brand in the name “usps”TLD with a high abuse rate “cfd”brand name and brand-styled page “usps”
Model opinion: suspicious (target: USPS), confidence 72%. An opinion, not a finding.
brand in the name “venmo”brand name at a retail registrar “Squarespace Domains II LLC”brand name and brand-styled page “venmo”
Model opinion: looks like abuse (target: Venmo), confidence 78%. An opinion, not a finding.
brand in the name “xbox”TLD with a high abuse rate “lol”brand name and brand-styled page “xbox”
Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.
brand in the name “sharepoint”brand plus digits “3in-sharepoint”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
page pushes urgent payment “Guaranteed returns”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 62%. An opinion, not a finding.
brand in the name “adobe”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
page pushes urgent payment “risk Free”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “icloud”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “apple”brand plus digits “apple-17”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
brand in the name “apple”brand plus digits “apple-18”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CNOBIN INFORMATION TECHNOLOGY LIMITED”
brand in the name “apple”brand plus digits “apple-26”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
brand in the name “icloud”brand plus digits “artstudio1369icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
one-letter brand typo “mobile≈tmobile”many hyphens “3”very long name “29”brand plus digits “australian-mobile-casinos-777”+1 more
brand in the name “intuit”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 70%. An opinion, not a finding.
brand in the name “bbva”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+2 more
Model opinion: suspicious (target: BBVA), confidence 72%. An opinion, not a finding.
brand in the name “stripe”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “google”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Model opinion: looks like abuse, confidence 75%. An opinion, not a finding.
brand in the name “shopify”brand plus digits “daysun62-myshopify”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “gmail”brand plus digits “ecpa49-gmail”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “gmail”brand plus digits “ektoraspieri21gmail”brand name behind Cloudflare “cloudflare.com”brand name redirects elsewhere “whop.com”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “sharepoint”brand plus digits “eu1-sharepoint”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “tiktok”TLD with a high abuse rate “xyz”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: looks like abuse, confidence 83%. An opinion, not a finding.
brand in the name “roblox”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name redirects elsewhere “maxaht.net”
Model opinion: looks like phishing (target: Roblox), confidence 82%. An opinion, not a finding.
brand in the name “google”TLD with a high abuse rate “download”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “shopify”many hyphens “3”very long name “30”brand name at a retail registrar “Namify Domains Inc”+1 more
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “instagram”TLD with a high abuse rate “xyz”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “icloud”brand plus digits “jheukeshoven307icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “google”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
Model opinion: suspicious, confidence 65%. An opinion, not a finding.