brand in the name “revolut”brand plus digits “metin2revolution”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”+1 more
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “twitter”form on a brand-styled page “has_form”
brand in the name “wordpress”brand name at a retail registrar “Porkbun, LLC”brand name at a watch-list registrar “Porkbun, LLC”identical page on many newborns “2654 identical pages”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “namecheap”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “4673 identical pages”
Model opinion: looks like abuse (target: Namecheap), confidence 60%. An opinion, not a finding.
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “etsy”lure words (login, verify, secure…) “secure”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “shopify”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “2654 identical pages”
Model opinion: looks benign, confidence 66%. An opinion, not a finding.
brand in the name “shopify”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “2654 identical pages”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
brand in the name “shopify”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “2654 identical pages”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “shopify”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “195 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: WhatsApp), confidence 62%. An opinion, not a finding.
brand in the name “telegram”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “2654 identical pages”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 62%. An opinion, not a finding.
one-letter brand typo “trustswallet≈trustwallet”lure words (login, verify, secure…) “wallet”
brand in the name “whatsapp”brand plus digits “whatsapp-br24”TLD with a high abuse rate “icu”brand name at a retail registrar “GLOBAL ASSET DOMAINS INC.”
brand in the name “whatsapp”brand plus digits “whatsapp011k”free DNS provider “dnsowl.com”brand name redirects elsewhere “wsapi.org”
Model opinion: looks like abuse (target: WhatsApp), confidence 76%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “whatsapp012k”free DNS provider “dnsowl.com”brand name redirects elsewhere “wsapi.org”
Model opinion: looks like abuse (target: WhatsApp), confidence 78%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “bluepressurewash1gmail”brand name and brand-styled page “gmail”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “fun”brand name and brand-styled page “robinhood”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “Beget LLC”brand name and brand-styled page “roblox”
Model opinion: looks like abuse (target: Roblox), confidence 60%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “fun”brand name and brand-styled page “robinhood”
Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.
brand in the name “shopify”brand name at a retail registrar “Namify Domains Inc”brand name and brand-styled page “shopify”
Model opinion: suspicious (target: Shopify), confidence 65%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
TLD with a high abuse rate “click”nameserver domain born the same day “digitalclickshq.click”brand in page title, not in the name “google”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand in the name “whatsapp”TLD with a high abuse rate “icu”brand name and brand-styled page “whatsapp”
Model opinion: looks like phishing (target: WhatsApp (Meta)), confidence 82%. An opinion, not a finding.
brand in the name “sharepoint”brand plus digits “1eu-sharepoint”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Instra Corporation Pty Ltd.”
brand in the name “sharepoint”brand plus digits “2in-sharepoint”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Instra Corporation Pty Ltd.”
brand in the name “tmobile”brand plus digits “33zktmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “tmobile”brand plus digits “456wintmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “tmobile”brand plus digits “47ftmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
brand in the name “tmobile”brand plus digits “666itmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
brand in the name “google”brand plus digits “88572-google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “fidelity”brand plus digits “9192931-fidelity”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “tmobile”brand plus digits “a7777tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
one-letter brand typo “inuit≈intuit”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “743 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
page pushes urgent payment “Limited Time Offer”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
TLD with a high abuse rate “top”page asks for credentials “Login to your Account”login form “has_form+login words”
Model opinion: looks like phishing (target: Bangkok Bank), confidence 94%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “bigmike45gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”