brand in the name “microsoft”very long name “31”brand name at a retail registrar “IONOS SE”identical page on many newborns “67 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “microsoft”very long name “31”brand name at a retail registrar “IONOS SE”identical page on many newborns “67 identical pages”
Model opinion: suspicious, confidence 52%. An opinion, not a finding.
brand in the name “nvidia”very long name “28”brand name at a retail registrar “IONOS SE”identical page on many newborns “67 identical pages”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “nvidia”very long name “28”brand name at a retail registrar “IONOS SE”identical page on many newborns “67 identical pages”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “openai”very long name “28”brand name at a retail registrar “IONOS SE”identical page on many newborns “67 identical pages”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “openai”very long name “28”brand name at a retail registrar “IONOS SE”identical page on many newborns “67 identical pages”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
Highschwob.cloudscore 52echoes schwab· registrar placeholder one-letter brand typo “schwob≈schwab”brand name at a retail registrar “NAMECHEAP”brand name at a watch-list registrar “NAMECHEAP”identical page on many newborns “3201 identical pages”
Model opinion: looks benign, confidence 73%. An opinion, not a finding.
one-letter brand typo “schwob≈schwab”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3201 identical pages”
Model opinion: looks benign, confidence 78%. An opinion, not a finding.
TLD with a high abuse rate “bid”page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: suspicious, confidence 62%. An opinion, not a finding.
brand in the name “taobao”brand plus digits “taobao2027”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
brand in the name “telegram”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”
Model opinion: looks like abuse (target: Telegram), confidence 72%. An opinion, not a finding.
Hightiktk.wikiscore 52echoes tiktok· boilerplate page one-letter brand typo “tiktk≈tiktok”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”identical page on many newborns “996 identical pages”
Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.
brand in the name “tiktok”TLD with a high abuse rate “bond”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NicNames, Inc.”
Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.
brand in the name “stripe”brand plus digits “user55-stripe”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
brand in the name “trezor”brand plus digits “v2-trezor”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
page asks for credentials “Login to your account”page impersonates a brand “Netflix”
Model opinion: looks like abuse, confidence 94%. An opinion, not a finding.
brand in the name “tiktok”brand plus digits “vikingtiktok88”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+2 more
Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.
Highfus44.topscore 51echoes usaa· not probed yet brand spelled with digits “fus44→usaa”brand plus digits “fus44”TLD with a high abuse rate “top”
brand spelled with digits “gymfit4u→itau”brand plus digits “gymfit4u”brand name at a retail registrar “Squarespace Domains II LLC”
brand spelled with digits “hook-74→okta”brand plus digits “hook-74”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “hulu”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “hulu”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand spelled with digits “te5la338burn→tesla”brand plus digits “te5la338burn”brand name at a retail registrar “CommuniGal Communication Ltd.”
punycode name “上海移远 scripts=CJK”random-looking name “H=3.77”TLD with a high abuse rate “work”brand in page title, not in the name “google”
Model opinion: suspicious, confidence 65%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”brand plus digits “916-mobile-detail”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “americanexpress”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”brand name redirects elsewhere “turboclean.space”
Model opinion: looks like abuse, confidence 82%. An opinion, not a finding.
TLD with a high abuse rate “fun”page impersonates a brand “metamask”brand in page title, not in the name “robinhood”
Model opinion: looks like a scam, confidence 65%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”brand plus digits “candu189-mobile”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
brand in the name “etsy”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: looks like phishing (target: Etsy), confidence 85%. An opinion, not a finding.
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”
Model opinion: looks benign, confidence 58%. An opinion, not a finding.
TLD with a high abuse rate “fun”page impersonates a brand “Metamask”brand in page title, not in the name “robinhood”
Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GLOBAL ASSET DOMAINS INC.”
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “instagram”brand name on a rarely-seen nameserver “istanco.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
one-letter brand typo “cloud≈icloud”brand plus digits “jump-cloud-enter01”brand name on a rarely-seen nameserver “adminvps.net”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
brand in the name “tiktok”brand in page title, not in the name “cloudflare”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Model opinion: suspicious, confidence 65%. An opinion, not a finding.