brand in the name “amazon”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
TLD with a high abuse rate “xyz”free DNS provider “dnsowl.com”page impersonates a brand “Netflix”brand in page title, not in the name “robinhood”
Model opinion: looks like a scam, confidence 82%. An opinion, not a finding.
brand in the name “xbox”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand in page title, not in the name “telegram”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “fun”free DNS provider “dnsowl.com”page impersonates a brand “Coinbase”brand in page title, not in the name “robinhood”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “roblox”brand plus digits “thehunt-roblox20”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more
Model opinion: suspicious (target: Roblox), confidence 55%. An opinion, not a finding.
brand in the name “roblox”brand plus digits “thehuntroblox-20”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
brand in the name “roblox”brand plus digits “thehuntroblox20”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
lure words (login, verify, secure…) “alert”TLD with a high abuse rate “sbs”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”
Model opinion: looks like phishing (target: Apple), confidence 95%. An opinion, not a finding.
brand in the name “namecheap”TLD with a high abuse rate “cyou”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 72%. An opinion, not a finding.
brand in the name “ionos”brand name at a retail registrar “DomainRegistry.com LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 94%. An opinion, not a finding.
one-letter brand typo “tikktok≈tiktok”many hyphens “3”brand plus digits “tikktok-18-app-6”TLD with a high abuse rate “top”+1 more
Model opinion: looks like abuse (target: TikTok), confidence 93%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “154217-coinbase”random-looking name “H=3.66”brand name on a rarely-seen nameserver “cnmsn.com”+1 more
Model opinion: suspicious (target: Coinbase), confidence 72%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “168flushingmail”brand name on a rarely-seen nameserver “interserver.net”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious (target: Gmail), confidence 72%. An opinion, not a finding.
brand in the name “twitter”brand plus digits “1xbettwitter”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
High273514.comscore 55echoes tesla· boilerplate page brand spelled with digits “273514→tesla”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “348929coinbase”random-looking name “H=3.66”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “coinbase”brand plus digits “892589coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “account”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “adobe”brand plus digits “adoben0rtonpage”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: looks like abuse (target: Adobe / Norton), confidence 78%. An opinion, not a finding.
brand in the name “icloud”lure words (login, verify, secure…) “track”TLD with a high abuse rate “xyz”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “binance”lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “fun”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 82%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
brand in the name “amazon”lure words (login, verify, secure…) “track,tracking”
brand in the name “anthropic”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”+1 more
brand spelled with digits “app132bet→apple”brand plus digits “app132bet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “ledger”brand plus digits “authorization01-ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
brand in the name “bankofamerica”lure words (login, verify, secure…) “claim,claims”brand name on a rarely-seen nameserver “bac.com”
brand in the name “roblox”brand plus digits “bel4dsg-roblox”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “bestbuy”TLD with a high abuse rate “top”brand name at a retail registrar “烟台帝思普网络科技有限公司”identical page on many newborns “89 identical pages”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand spelled with digits “betus44→usaa”brand plus digits “betus44”brand name at a retail registrar “Dynadot LLC.”brand name at a watch-list registrar “Dynadot LLC.”
brand in the name “trustwallet”lure words (login, verify, secure…) “billing,wallet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “binance”brand plus digits “binance-1”TLD with a high abuse rate “fun”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 78%. An opinion, not a finding.
brand in the name “binance”brand plus digits “binance-1”TLD with a high abuse rate “xyz”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 82%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “airdrop”TLD with a high abuse rate “xyz”
brand in the name “binance”TLD with a high abuse rate “fun”brand name at a retail registrar “Nicnames, Inc.”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 75%. An opinion, not a finding.
brand in the name “binance”TLD with a high abuse rate “fun”brand name at a retail registrar “Nicnames, Inc.”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 75%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “fun”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 80%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “wallet”
brand in the name “binance”lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “fun”
brand in the name “binance”lure words (login, verify, secure…) “wallet”
one-letter brand typo “cheatgpt≈chatgpt”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
brand in the name “cibc”lure words (login, verify, secure…) “signin”
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “auth”brand name behind Cloudflare “cloudflare.com”
Model opinion: looks like phishing (target: Apple (iCloud)), confidence 58%. An opinion, not a finding.
brand in the name “coinbase”lure words (login, verify, secure…) “official,wallet”free DNS provider “dnsowl.com”
one-letter brand typo “finance≈binance”TLD with a high abuse rate “sbs”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
one-letter brand typo “finance≈binance”TLD with a high abuse rate “sbs”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “binance”TLD with a high abuse rate “xyz”brand name at a retail registrar “NicNames, Inc.”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 72%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Namify Domains Inc”brand in page title, not in the name “cloudflare”
Model opinion: unreachable when judged, confidence 90%. An opinion, not a finding.
brand in the name “cloudflare”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”+1 more
Model opinion: looks like abuse (target: Cloudflare), confidence 72%. An opinion, not a finding.
brand in the name “ebay”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more