one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
one-letter brand typo “whatsspp≈whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
brand in the name “amazon”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “nmazon≈amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
many hyphens “6”very long name “45”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
very long name “36”page asks for credentials “Login to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Highseebay.orgscore 48echoes ebay· boilerplate page brand in the name “ebay”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3176 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “spotirfy≈spotify”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “tiptok≈tiktok”brand in page title, not in the name “tiktok”
Model opinion: suspicious (target: TikTok), confidence 72%. An opinion, not a finding.
brand in the name “usaa”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: Allbirds), confidence 82%. An opinion, not a finding.
brand in the name “vanguard”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “wallmart≈walmart”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GNAME.COM PTE. LTD.”brand name at a watch-list registrar “GNAME.COM PTE. LTD.”
one-letter brand typo “xmobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
punycode name “españolepig scripts=LATIN”brand in page title, not in the name “hostinger”identical page on many newborns “46 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
punycode name “googlereseñas scripts=LATIN”brand in the name “google”
TLD with a high abuse rate “cfd”brand in page title, not in the name “amazon”form on a brand-styled page “has_form”
Model opinion: suspicious (target: Amazon), confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “win”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
TLD with a high abuse rate “lol”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
one-letter brand typo “bestboy≈bestbuy”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “lol”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious (target: Google), confidence 72%. An opinion, not a finding.
one-letter brand typo “caschapp≈cashapp”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3176 identical pages”
Model opinion: looks like abuse (target: Cash App), confidence 82%. An opinion, not a finding.
TLD with a high abuse rate “lol”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 78%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “3176 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
TLD with a high abuse rate “cyou”brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
brand in the name “costco”brand plus digits “costcowholesalereturn2026”brand name at a retail registrar “GoDaddy.com, LLC”
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “ebay”brand plus digits “ebay-098”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
TLD with a high abuse rate “bid”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “tmobile”brand plus digits “esbetmobile4”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “etsy”brand plus digits “etsy57c5tb6v-z00af”brand name at a retail registrar “GoDaddy.com, LLC”
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 78%. An opinion, not a finding.
one-letter brand typo “fidel1ty≈fidelity”brand plus digits “fidel1ty”identical page on many newborns “27 identical pages”
Model opinion: looks like abuse (target: Fidelity), confidence 70%. An opinion, not a finding.
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 70%. An opinion, not a finding.