brand in the name “revolut”lure words (login, verify, secure…) “help”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
brand in the name “gmail”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
brand in the name “hmrc”lure words (login, verify, secure…) “support”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “hulu”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot LLC”+1 more
brand in the name “hulu”brand plus digits “huluplay4k”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse (target: Hulu), confidence 70%. An opinion, not a finding.
brand in the name “ionos”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “128 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “icloud”lure words (login, verify, secure…) “support”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
Model opinion: looks like abuse (target: Apple), confidence 80%. An opinion, not a finding.
brand spelled with digits “idrokt4→okta”brand plus digits “idrokt4”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1345 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “instagram”lure words (login, verify, secure…) “security”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “intuit”lure words (login, verify, secure…) “account,accounts”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “intuit”lure words (login, verify, secure…) “update”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “intuit”lure words (login, verify, secure…) “service”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “amazon”very long name “33”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “ionos”lure words (login, verify, secure…) “service”brand name on a rarely-seen nameserver “pql.net”brand name at a retail registrar “CNOBIN INFORMATION TECHNOLOGY LIMITED”
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”+2 more
brand in the name “sharepoint”lure words (login, verify, secure…) “portal”very long name “32”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: looks like abuse (target: Microsoft SharePoint), confidence 72%. An opinion, not a finding.
brand in the name “laposte”lure words (login, verify, secure…) “service”brand name at a retail registrar “Ultahost, Inc.”
Highle75y.topscore 55echoes etsy· not probed yet brand spelled with digits “le75y→etsy”brand plus digits “le75y”TLD with a high abuse rate “top”brand name at a retail registrar “GoDaddy.com”
Highle84y.topscore 55echoes ebay· not probed yet brand spelled with digits “le84y→ebay”brand plus digits “le84y”TLD with a high abuse rate “top”brand name at a retail registrar “GoDaddy.com”
brand in the name “linkedin”lure words (login, verify, secure…) “access,portal”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “google”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: looks like abuse (target: Google), confidence 60%. An opinion, not a finding.
brand in the name “paypal”lure words (login, verify, secure…) “pay”many hyphens “3”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
one-letter brand typo “linkedln≈linkedin”lure words (login, verify, secure…) “login”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Turkticaret.net Yazilim Hizmetleri Sanay”
one-letter brand typo “linkedln≈linkedin”lure words (login, verify, secure…) “login”brand name at a retail registrar “Turkticaret.net Yazılım Hizmetleri Sanay”
one-letter brand typo “linkedln≈linkedin”lure words (login, verify, secure…) “login”brand name at a retail registrar “Turkticaret.net Yazılım Hizmetleri Sanay”
brand in the name “microsoft”lure words (login, verify, secure…) “login”brand name at a retail registrar “Porkbun, LLC”brand name at a watch-list registrar “Porkbun, LLC”
brand in the name “sharepoint”lure words (login, verify, secure…) “login”brand plus digits “login-sharepoint365”brand name at a retail registrar “Web Commerce Communications Limited dba ”+1 more
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “support”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
one-letter brand typo “stride≈stripe”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “etsy”brand plus digits “melbet-syl97”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”+3 more
Model opinion: looks like abuse (target: Melbet), confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “Nics Telekomunikasyon A.S.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “microsoft”lure words (login, verify, secure…) “update”very long name “31”TLD with a high abuse rate “top”+3 more
brand in the name “microsoft”lure words (login, verify, secure…) “verify”brand plus digits “microsoftverify365”brand name at a retail registrar “GoDaddy.com, LLC”
one-letter brand typo “microsolt≈microsoft”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”brand in page title, not in the name “cloudflare”
brand in the name “taobao”TLD with a high abuse rate “xyz”brand name at a retail registrar “Global Domain Group LLC”brand in page title, not in the name “google”+2 more
Model opinion: looks like abuse (target: Taobao), confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1345 identical pages”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1345 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “shopify”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”
brand in the name “netflix”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”+1 more
Model opinion: looks like abuse (target: Netflix), confidence 60%. An opinion, not a finding.
brand spelled with digits “ole777mobile→tmobile”brand plus digits “ole777mobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
one-letter brand typo “openpi≈openai”brand name at a retail registrar “Key-Systems GmbH”brand in page title, not in the name “cloudflare”
Model opinion: unreachable when judged, confidence 80%. An opinion, not a finding.
brand in the name “openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: OpenAI), confidence 80%. An opinion, not a finding.
brand in the name “openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: OpenAI), confidence 80%. An opinion, not a finding.
brand in the name “openai”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: OpenAI), confidence 75%. An opinion, not a finding.
brand in the name “paypal”lure words (login, verify, secure…) “pay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
brand in the name “paypal”lure words (login, verify, secure…) “pay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+3 more
Model opinion: looks like abuse (target: PayPal), confidence 85%. An opinion, not a finding.
lure words (login, verify, secure…) “gov,portal”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand spelled with digits “primeamaz0n→amazon”brand plus digits “primeamaz0n”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.
brand in the name “shopify”lure words (login, verify, secure…) “security”brand name behind Cloudflare “cloudflare.com”