brand in the name “itau”lure words (login, verify, secure…) “win”many hyphens “3”brand name behind Cloudflare “cloudflare.com”+2 more
brand in the name “xbox”brand plus digits “xbox360gaoqingshipinxian”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
brand in the name “xbox”brand plus digits “xbox360gaoqingshipinxian1”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
brand in the name “zelle”lure words (login, verify, secure…) “payment,payments,secure”brand name at a retail registrar “OwnRegistrar, Inc.”
brand in the name “zelle”lure words (login, verify, secure…) “customer,customers,support”very long name “29”brand name at a retail registrar “Spaceship, Inc.”+1 more
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”identical page on many newborns “221 identical pages”
Model opinion: looks like abuse (target: Amazon), confidence 77%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “track”
brand in the name “tiktok”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3701 identical pages”
Model opinion: suspicious (target: TikTok), confidence 55%. An opinion, not a finding.
brand in the name “whatsapp”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”identical page on many newborns “66 identical pages”
Model opinion: looks like abuse (target: WhatsApp), confidence 58%. An opinion, not a finding.
brand in the name “gmail”very long name “28”brand name on a rarely-seen nameserver “webzi.mx”brand name at a retail registrar “NameSilo, LLC”+1 more
one-letter brand typo “finance≈binance”brand name at a retail registrar “Hosting Ukraine LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 77%. An opinion, not a finding.
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 74%. An opinion, not a finding.
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “revolut”lure words (login, verify, secure…) “login,signin”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “namecheap”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3701 identical pages”
brand in the name “openai”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “592 identical pages”
brand in the name “playstation”brand plus digits “playstation5alanyer”TLD with a high abuse rate “xyz”brand name at a retail registrar “Nics Telekomunikasyon A.S.”
brand in the name “ebay”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”identical page on many newborns “24 identical pages”
Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.
brand in the name “tiktok”brand plus digits “tiktok168”TLD with a high abuse rate “top”brand name at a retail registrar “July Name Limited”
brand in the name “whatsapp”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”identical page on many newborns “82 identical pages”
Model opinion: looks like abuse (target: WhatsApp), confidence 74%. An opinion, not a finding.
brand in the name “gmail”brand name at a retail registrar “Namify Domains Inc”brand name and brand-styled page “gmail”
Model opinion: looks like abuse (target: Gmail (Google)), confidence 80%. An opinion, not a finding.
brand in the name “shopify”brand name at a retail registrar “Namify Domains Inc”brand name and brand-styled page “shopify”
Model opinion: looks like abuse (target: Shopify), confidence 60%. An opinion, not a finding.
brand in the name “telegram”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”brand name and brand-styled page “telegram”
Model opinion: looks like abuse (target: Telegram), confidence 55%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “3113gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “gmail”brand plus digits “514gmail”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “gmail”brand plus digits “791gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “gmail”brand plus digits “924gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “gmail”brand plus digits “aceenviro85gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “amazon”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks like abuse (target: Amazon), confidence 72%. An opinion, not a finding.
lure words (login, verify, secure…) “auth”TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: ClearBank), confidence 70%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “bandh2026-gmail”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “gmail”lure words (login, verify, secure…) “account”very long name “40”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “lazada”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “lazada”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse, confidence 90%. An opinion, not a finding.
brand in the name “outlook”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Highchatgbt.sitescore 52echoes chatgpt· registrar placeholder one-letter brand typo “chatgbt≈chatgpt”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3701 identical pages”
Model opinion: looks like abuse (target: OpenAI (ChatGPT)), confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Namecheap, Inc.”brand name at a watch-list registrar “Namecheap, Inc.”identical page on many newborns “1721 identical pages”
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “coinbase66”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
brand in the name “icloud”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “usaa”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “slack”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “icloud”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “facebook”brand plus digits “facebook7”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Name.com, Inc.”
brand in the name “facebook”brand plus digits “facebookshop0”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
lure words (login, verify, secure…) “gov”TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in the name “google”TLD with a high abuse rate “cam”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “gadomains”
Model opinion: looks like abuse (target: Google Chrome), confidence 85%. An opinion, not a finding.
brand in the name “hsbc”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “hsbc”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”