brand in the name “tiktok”TLD with a high abuse rate “lol”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: suspicious (target: tiktok), confidence 41%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”brand name redirects elsewhere “l.ink”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “w10-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: suspicious (target: whatsapp), confidence 64%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “w7-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: looks like abuse (target: whatsapp), confidence 40%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “w8-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: suspicious (target: whatsapp), confidence 63%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “w9-whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
Model opinion: suspicious (target: whatsapp), confidence 61%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “willard4fencegmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Model opinion: suspicious (target: Gmail), confidence 72%. An opinion, not a finding.
brand in the name “openai”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “ledger”
Model opinion: looks benign, confidence 74%. An opinion, not a finding.
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “telegram”
Model opinion: suspicious (target: Telegram), confidence 72%. An opinion, not a finding.
brand spelled with digits “u83r4zsu→uber”brand plus digits “u83r4zsu”TLD with a high abuse rate “top”
Model opinion: unreachable when judged, confidence 55%. An opinion, not a finding.
punycode name “上海移远通信 scripts=CJK”random-looking name “H=4.19”TLD with a high abuse rate “top”brand in page title, not in the name “google”
Model opinion: looks like abuse (target: Quectel (上海移远通信)), confidence 55%. An opinion, not a finding.
brand in the name “gmail”very long name “29”brand plus digits “2sheppardshomeinspectiongmail”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: suspicious (target: Gmail), confidence 62%. An opinion, not a finding.
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: google), confidence 73%. An opinion, not a finding.
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious (target: shopee), confidence 44%. An opinion, not a finding.
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
TLD with a high abuse rate “mom”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “monster”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
one-letter brand typo “coinba9e≈coinbase”brand plus digits “coinba9e”brand name on a rarely-seen nameserver “aftermarket.pl”brand name at a retail registrar “Key-Systems GmbH”
Model opinion: looks like abuse (target: coinbase), confidence 42%. An opinion, not a finding.
lure words (login, verify, secure…) “confirm,secure,update”very long name “44”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: coinbase), confidence 69%. An opinion, not a finding.
TLD with a high abuse rate “fun”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “fedex”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Model opinion: suspicious (target: fedex), confidence 63%. An opinion, not a finding.
brand in the name “fedex”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Model opinion: suspicious (target: fedex), confidence 63%. An opinion, not a finding.
TLD with a high abuse rate “lol”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
TLD with a high abuse rate “sbs”page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”many hyphens “3”brand plus digits “g6-mobile-auto-care”brand name at a retail registrar “Tucows Domains Inc.”
Model opinion: suspicious, confidence 43%. An opinion, not a finding.
Highgongle.sbsscore 50echoes google· blocked the probe one-letter brand typo “gongle≈google”TLD with a high abuse rate “sbs”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: looks like abuse, confidence 54%. An opinion, not a finding.
Highgooge.lolscore 50echoes google· not probed yet one-letter brand typo “googe≈google”TLD with a high abuse rate “lol”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: suspicious (target: google), confidence 40%. An opinion, not a finding.
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “DEVEXPANSE LTD d/b/a Regery.com”brand name at a watch-list registrar “DEVEXPANSE LTD d/b/a Regery.com”
Model opinion: suspicious (target: google), confidence 72%. An opinion, not a finding.
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: icloud), confidence 57%. An opinion, not a finding.
TLD with a high abuse rate “xyz”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
TLD with a high abuse rate “sbs”page impersonates a brand “Apple ID”brand in page title, not in the name “apple”
Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “lazada”brand in page title, not in the name “shopee”
Model opinion: looks like abuse (target: Lazada), confidence 72%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
Model opinion: looks like abuse (target: icloud), confidence 56%. An opinion, not a finding.
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “airbnb”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 94%. An opinion, not a finding.
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: coinbase), confidence 56%. An opinion, not a finding.
one-letter brand typo “finance≈binance”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: looks like abuse (target: binance), confidence 43%. An opinion, not a finding.
one-letter brand typo “open5i≈openai”brand plus digits “open5i”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: looks like abuse, confidence 43%. An opinion, not a finding.
brand in the name “openai”many hyphens “3”brand name on a rarely-seen nameserver “pql.net”brand name at a retail registrar “CNOBIN INFORMATION TECHNOLOGY LIMITED”
Model opinion: suspicious (target: openai), confidence 67%. An opinion, not a finding.
one-letter brand typo “opensi≈openai”TLD with a high abuse rate “icu”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
Model opinion: looks like abuse (target: openai), confidence 57%. An opinion, not a finding.
brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: suspicious, confidence 58%. An opinion, not a finding.
brand in the name “robinhood”brand in page title, not in the name “namecheap”
Model opinion: looks like abuse (target: Robinhood), confidence 72%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: suspicious (target: Roblox), confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand plus digits “s2-cloud”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks like abuse, confidence 58%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name on a rarely-seen nameserver “awsdns-20.net”brand name at a retail registrar “Amazon Registrar, Inc.”
Model opinion: looks like abuse (target: icloud), confidence 43%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 98%. An opinion, not a finding.
brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Model opinion: suspicious (target: shopee), confidence 58%. An opinion, not a finding.