page asks for credentials “Log in to your account”page impersonates a brand “Amazon Prime”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 91%. An opinion, not a finding.
brand in the name “apple”lure words (login, verify, secure…) “support”brand name and brand-styled page “apple”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “netflix”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “Netflix”page pushes urgent payment “Claim Your Bonus”+1 more
Model opinion: looks like abuse (target: Netflix), confidence 88%. An opinion, not a finding.
brand in the name “telegram”page impersonates a brand “binance”brand name and brand-styled page “telegram”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “intesa”brand plus digits “intesa365erix”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “intesa”+1 more
Model opinion: looks like a scam, confidence 86%. An opinion, not a finding.
brand in the name “shopify”lure words (login, verify, secure…) “service,services”brand name and brand-styled page “shopify”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CloudFlare, Inc.”brand name and brand-styled page “tiktok”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “linkedin”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “linkedin”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “telegram”TLD with a high abuse rate “top”brand name and brand-styled page “telegram”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Telegram), confidence 62%. An opinion, not a finding.
brand in the name “spotify”brand plus digits “spotify88”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “google”form on a brand-styled page “has_form”
Model opinion: looks like a scam (target: Google), confidence 86%. An opinion, not a finding.
brand in the name “intesa”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “intesa”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 86%. An opinion, not a finding.
brand in the name “barclays”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more
Model opinion: looks like a scam (target: Barclays), confidence 89%. An opinion, not a finding.
brand in the name “netflix”page impersonates a brand “Netflix”brand name and brand-styled page “netflix”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
page asks for credentials “log in to your account”page impersonates a brand “PayPal”login form “has_form+login words”
Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 87%. An opinion, not a finding.
one-letter brand typo “tikktok≈tiktok”brand plus digits “japan-21-tikktok”TLD with a high abuse rate “sbs”brand in page title, not in the name “tiktok”
Model opinion: looks like abuse (target: TikTok), confidence 92%. An opinion, not a finding.
one-letter brand typo “tikktok≈tiktok”brand plus digits “japan-41-tikktok”TLD with a high abuse rate “sbs”brand in page title, not in the name “tiktok”
Model opinion: looks like abuse (target: TikTok), confidence 93%. An opinion, not a finding.
brand in the name “ionos”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “wordpress”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “chatgpt”brand name and brand-styled page “chatgpt”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “vanguard”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “vanguard”brand name and brand-styled page “vanguard”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 86%. An opinion, not a finding.
brand in the name “hulu”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
brand in the name “gmail”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
page impersonates a brand “Binance”brand in page title, not in the name “binance”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 76%. An opinion, not a finding.
page impersonates a brand “Binance”brand in page title, not in the name “binance”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: Binance), confidence 88%. An opinion, not a finding.
page impersonates a brand “FedEx”brand in page title, not in the name “fedex”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.
brand in the name “adobe”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+2 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
one-letter brand typo “finance≈binance”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 93%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “amazon”
Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Key-Systems LLC”brand name and brand-styled page “roblox”
Model opinion: looks like phishing (target: Roblox), confidence 93%. An opinion, not a finding.
brand in the name “stripe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand name and brand-styled page “stripe”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “anthropic”TLD with a high abuse rate “lol”brand in page title, not in the name “robinhood”
Model opinion: looks like a scam (target: Anthropic), confidence 78%. An opinion, not a finding.
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”page impersonates a brand “Binance”
Model opinion: suspicious (target: Binance), confidence 56%. An opinion, not a finding.
brand in the name “nvidia”TLD with a high abuse rate “fun”brand in page title, not in the name “robinhood”
Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.
brand in the name “fidelity”brand name at a retail registrar “Name.com, Inc.”brand in page title, not in the name “zoom”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”page impersonates a brand “Netflix”brand in page title, not in the name “robinhood”
Model opinion: looks like a scam, confidence 68%. An opinion, not a finding.
brand in the name “google”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+2 more
Model opinion: looks like abuse (target: Google), confidence 72%. An opinion, not a finding.
brand in the name “ionos”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
brand in the name “smbc”brand name at a retail registrar “Automattic Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 96%. An opinion, not a finding.
one-letter brand typo “outloop≈outlook”brand name at a retail registrar “Name.com, Inc.”brand in page title, not in the name “whatsapp”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.
brand in the name “tiktok”brand plus digits “rupiahtiktok88”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
High0kta.betscore 55echoes okta· empty page brand spelled with digits “0kta→okta”brand plus digits “0kta”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “104833coinbase”random-looking name “H=3.66”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: looks like abuse (target: Coinbase), confidence 78%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “182723coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.