brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: TikTok), confidence 72%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “facebook”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: Meta (Facebook)), confidence 68%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”many hyphens “5”very long name “33”brand plus digits “nhm-low-cost-cloud-management-o1r”+1 more
Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.
brand in the name “openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”identical page on many newborns “2879 identical pages”
Model opinion: looks like abuse (target: openai), confidence 40%. An opinion, not a finding.
brand in the name “openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”identical page on many newborns “383 identical pages”
Model opinion: looks like abuse (target: openai), confidence 54%. An opinion, not a finding.
brand in the name “tmobile”lure words (login, verify, secure…) “service”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: suspicious (target: tmobile), confidence 60%. An opinion, not a finding.
one-letter brand typo “rcblox≈roblox”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Roblox), confidence 72%. An opinion, not a finding.
brand in the name “instagram”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Model opinion: suspicious (target: instagram), confidence 80%. An opinion, not a finding.
brand in the name “icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “53 identical pages”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “tiktok”brand plus digits “tiktokporn18”TLD with a high abuse rate “icu”brand name at a retail registrar “Global Domain Group LLC”
Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.
one-letter brand typo “wilmart≈walmart”brand name at a retail registrar “GoDaddy.com LLC”form on a brand-styled page “has_form”
Model opinion: suspicious (target: Walmart), confidence 58%. An opinion, not a finding.
one-letter brand typo “zcloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Model opinion: unreachable when judged, confidence 72%. An opinion, not a finding.
brand in the name “shopify”many hyphens “3”brand plus digits “bggg1r-y0-myshopify-com”random-looking name “H=3.65”+1 more
Model opinion: looks like abuse (target: Shopify), confidence 70%. An opinion, not a finding.
brand in the name “shopify”many hyphens “3”brand plus digits “dfvgqt-1t-myshopify-com”random-looking name “H=3.82”+1 more
Model opinion: looks like abuse (target: Shopify), confidence 70%. An opinion, not a finding.
brand in the name “linkedin”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “linkedin”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “telegram”brand name and brand-styled page “telegram”brand name redirects elsewhere “t.me”
Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.
brand in the name “gmail”brand name at a retail registrar “Namify Domains Inc”brand name and brand-styled page “gmail”
Model opinion: suspicious (target: Gmail), confidence 60%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “128283coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
Model opinion: suspicious (target: coinbase), confidence 56%. An opinion, not a finding.
brand in the name “canadapost”brand plus digits “1canadapost”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: canadapost), confidence 68%. An opinion, not a finding.
brand in the name “google”brand plus digits “431398google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Model opinion: suspicious (target: google), confidence 68%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “882337coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”
Model opinion: suspicious (target: coinbase), confidence 58%. An opinion, not a finding.
brand in the name “fidelity”brand plus digits “9192931-fidelity”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: fidelity), confidence 72%. An opinion, not a finding.
brand in the name “adobe”TLD with a high abuse rate “xyz”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Model opinion: suspicious (target: adobe), confidence 40%. An opinion, not a finding.
TLD with a high abuse rate “xyz”page asks for credentials “login to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”brand name redirects elsewhere “atom.com”
Model opinion: looks benign, confidence 49%. An opinion, not a finding.
brand in the name “bestbuy”brand plus digits “bestbuy24”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com LLC”
Model opinion: looks like abuse (target: bestbuy), confidence 41%. An opinion, not a finding.
brand in the name “chatgpt”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.
lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “top”brand in page title, not in the name “ledger”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “telegram”TLD with a high abuse rate “lol”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: suspicious, confidence 64%. An opinion, not a finding.
brand in the name “zelle”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “gmail130”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious (target: gmail), confidence 61%. An opinion, not a finding.
TLD with a high abuse rate “xyz”page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “intuit”TLD with a high abuse rate “quest”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: suspicious, confidence 59%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “jmale1234gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Model opinion: suspicious (target: gmail), confidence 56%. An opinion, not a finding.
brand in the name “zoom”brand plus digits “jnt777-zoom”TLD with a high abuse rate “work”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: zoom), confidence 42%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “fun”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.
brand in the name “office365”brand plus digits “msoffice365”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: suspicious (target: office365), confidence 71%. An opinion, not a finding.
Highopensi.betscore 52echoes openai· boilerplate page one-letter brand typo “opensi≈openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”identical page on many newborns “2879 identical pages”
Model opinion: looks like abuse (target: openai), confidence 74%. An opinion, not a finding.
Highopensi.onescore 52echoes openai· boilerplate page one-letter brand typo “opensi≈openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”identical page on many newborns “2879 identical pages”
Model opinion: looks like abuse (target: openai), confidence 81%. An opinion, not a finding.
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: looks like phishing, confidence 68%. An opinion, not a finding.
Highpostal.goldscore 52echoes postnl· registrar placeholder one-letter brand typo “postal≈postnl”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “2793 identical pages”
Model opinion: looks like abuse, confidence 54%. An opinion, not a finding.
brand in the name “openai”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious (target: openai), confidence 62%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “s10-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: suspicious (target: whatsapp), confidence 68%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “s6-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: suspicious (target: whatsapp), confidence 65%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “s7-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: suspicious (target: whatsapp), confidence 64%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “s8-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: suspicious (target: whatsapp), confidence 66%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “s9-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: suspicious (target: whatsapp), confidence 65%. An opinion, not a finding.
lure words (login, verify, secure…) “service”TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “telegram”TLD with a high abuse rate “mom”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: suspicious, confidence 49%. An opinion, not a finding.