brand in the name “google”lure words (login, verify, secure…) “account”many hyphens “4”very long name “54”+4 more
Model opinion: suspicious (target: google), confidence 54%. An opinion, not a finding.
brand in the name “google”lure words (login, verify, secure…) “account,signin”many hyphens “4”very long name “51”+6 more
Model opinion: looks like abuse (target: Google), confidence 80%. An opinion, not a finding.
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “account,payment”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot LLC”+3 more
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “adobe”lure words (login, verify, secure…) “verify”brand name at a retail registrar “Tucows Domains Inc.”
Model opinion: suspicious (target: adobe), confidence 80%. An opinion, not a finding.
brand in the name “icloud”TLD with a high abuse rate “men”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Model opinion: suspicious (target: icloud), confidence 41%. An opinion, not a finding.
brand in the name “amazon”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Devexpanse Ltd”+1 more
Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Amazon), confidence 72%. An opinion, not a finding.
brand in the name “amazon”brand plus digits “amazoncdn21”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: suspicious (target: amazon), confidence 45%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1253 identical pages”
Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “Tucows Domains Inc.”brand name and brand-styled page “amazon”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “adobe”lure words (login, verify, secure…) “service,services”free DNS provider “dnsowl.com”
Model opinion: suspicious (target: adobe), confidence 58%. An opinion, not a finding.
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Model opinion: looks like abuse (target: Trust Wallet), confidence 80%. An opinion, not a finding.
one-letter brand typo “betflix≈netflix”brand plus digits “betflix-555”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.
brand in the name “binance”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: suspicious (target: binance), confidence 51%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “security,wallet”brand name at a retail registrar “Squarespace Domains II LLC”
Model opinion: suspicious (target: binance), confidence 69%. An opinion, not a finding.
brand in the name “bybit”lure words (login, verify, secure…) “help”brand name at a retail registrar “Squarespace Domains II LLC”
Model opinion: suspicious (target: bybit), confidence 72%. An opinion, not a finding.
brand in the name “bybit”lure words (login, verify, secure…) “helpdesk”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: bybit), confidence 83%. An opinion, not a finding.
brand in the name “canadapost”lure words (login, verify, secure…) “package”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OwnRegistrar, Inc.”
Model opinion: suspicious (target: canadapost), confidence 71%. An opinion, not a finding.
brand in the name “zelle”TLD with a high abuse rate “top”brand name at a retail registrar “Namecheap Inc.”brand name at a watch-list registrar “Namecheap Inc.”+1 more
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: WhatsApp), confidence 77%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-pay637”TLD with a high abuse rate “hair”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
brand in the name “cloudflare”lure words (login, verify, secure…) “verify”brand name at a retail registrar “OVH sas”brand name and brand-styled page “cloudflare”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “coinbase”lure words (login, verify, secure…) “portal”brand name at a retail registrar “Squarespace Domains II LLC”
Model opinion: suspicious (target: coinbase), confidence 78%. An opinion, not a finding.
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Highconcast.appscore 55echoes comcast· registrar placeholder one-letter brand typo “concast≈comcast”brand name at a retail registrar “1&1 Internet SE”form on a brand-styled page “has_form”identical page on many newborns “1253 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “ledger”lure words (login, verify, secure…) “confirm,confirmation”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
brand in the name “wordpress”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1253 identical pages”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “wordpress”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1253 identical pages”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “desjardlns≈desjardins”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo,LLC”+1 more
brand in the name “sharepoint”brand name at a retail registrar “DropCatch.com 1167 LLC”identical page on many newborns “171 identical pages”brand name redirects elsewhere “dropcatch.com”
Model opinion: looks like abuse (target: Microsoft (SharePoint)), confidence 60%. An opinion, not a finding.
brand in the name “docusign”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
brand in the name “docusign”lure words (login, verify, secure…) “authenticate”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”+2 more
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”+1 more
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
one-letter brand typo “expedir≈expedia”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”+1 more
one-letter brand typo “facebok≈facebook”TLD with a high abuse rate “quest”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+4 more
Model opinion: looks like abuse (target: Facebook), confidence 74%. An opinion, not a finding.
brand in the name “facebook”lure words (login, verify, secure…) “2fa”brand plus digits “facebook-2fa”brand name at a retail registrar “DNSPod, Inc.”
brand in the name “facebook”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “facebook”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “facebook”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “facebook”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “facebook”lure words (login, verify, secure…) “security”TLD with a high abuse rate “bid”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “facebook”lure words (login, verify, secure…) “update”TLD with a high abuse rate “bid”brand name behind Cloudflare “cloudflare.com”+1 more
one-letter brand typo “fcebook≈facebook”TLD with a high abuse rate “quest”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+4 more
Model opinion: looks like abuse (target: Facebook), confidence 80%. An opinion, not a finding.
brand in the name “fidelity”TLD with a high abuse rate “xyz”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse (target: Fidelity International), confidence 65%. An opinion, not a finding.
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “GoDaddy.com, LLC”
one-letter brand typo “lcloud≈icloud”TLD with a high abuse rate “click”brand name on a rarely-seen nameserver “dnsstarsistem.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “slack”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
brand spelled with digits “gg97mobile→tmobile”brand plus digits “gg97mobile”brand name at a retail registrar “Gname 076 Inc”brand name at a watch-list registrar “Gname 076 Inc”
brand in the name “gmail”lure words (login, verify, secure…) “recover,recovery”brand plus digits “gmail-recovery-ref9593”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “gmail”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more