brand in the name “hulu”lure words (login, verify, secure…) “portal”brand name at a retail registrar “InterNetX GmbH”identical page on many newborns “267 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “hulu”lure words (login, verify, secure…) “portal”brand name at a retail registrar “InterNetX GmbH”identical page on many newborns “267 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “whatsapp”lure words (login, verify, secure…) “access”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: whatsapp), confidence 84%. An opinion, not a finding.
brand in the name “adobe”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious (target: Adobe), confidence 65%. An opinion, not a finding.
brand in the name “amazon”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious (target: amazon), confidence 63%. An opinion, not a finding.
brand in the name “amazon”lure words (login, verify, secure…) “track”brand plus digits “amazon122tracklife”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: amazon), confidence 83%. An opinion, not a finding.
brand in the name “amazon”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: suspicious (target: amazon), confidence 52%. An opinion, not a finding.
brand in the name “amazon”lure words (login, verify, secure…) “delivery”
Model opinion: suspicious (target: amazon), confidence 77%. An opinion, not a finding.
brand in the name “amazon”lure words (login, verify, secure…) “parcel”
Model opinion: suspicious (target: amazon), confidence 68%. An opinion, not a finding.
one-letter brand typo “finance≈binance”many hyphens “3”brand plus digits “app-curve-finance-v1”brand name at a retail registrar “Web Commerce Communications Limited dba ”+1 more
Model opinion: suspicious, confidence 49%. An opinion, not a finding.
brand in the name “apple”lure words (login, verify, secure…) “claim,claims”
Model opinion: suspicious (target: apple), confidence 84%. An opinion, not a finding.
brand in the name “ledger”brand plus digits “authorization31-ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: unreachable when judged, confidence 53%. An opinion, not a finding.
brand in the name “gmail”lure words (login, verify, secure…) “billing”
Model opinion: suspicious (target: gmail), confidence 78%. An opinion, not a finding.
Highbarclay.topscore 55echoes barclays· parked, for sale one-letter brand typo “barclay≈barclays”TLD with a high abuse rate “top”form on a brand-styled page “has_form”brand name redirects elsewhere “dynadot.com”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “barclays”TLD with a high abuse rate “top”brand name and brand-styled page “barclays”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: Barclays), confidence 80%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “account”
Model opinion: suspicious (target: binance), confidence 57%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “account”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious (target: binance), confidence 73%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “login”brand name on a rarely-seen nameserver “clientvps.com”
Model opinion: suspicious (target: binance), confidence 76%. An opinion, not a finding.
brand in the name “smbc”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “capitalone”lure words (login, verify, secure…) “reward,rewards”
Model opinion: suspicious (target: capitalone), confidence 84%. An opinion, not a finding.
brand in the name “cashapp”lure words (login, verify, secure…) “payment”
Model opinion: suspicious (target: cashapp), confidence 77%. An opinion, not a finding.
brand in the name “chatgpt”TLD with a high abuse rate “sbs”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: unreachable when judged, confidence 62%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious, confidence 45%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “verify”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: icloud), confidence 69%. An opinion, not a finding.
brand in the name “coinbase”lure words (login, verify, secure…) “verify”
Model opinion: suspicious (target: coinbase), confidence 84%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “costco”lure words (login, verify, secure…) “member”brand plus digits “costcomember8932”
Model opinion: suspicious (target: costco), confidence 71%. An opinion, not a finding.
brand in the name “robinhood”TLD with a high abuse rate “fun”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse (target: Robinhood), confidence 60%. An opinion, not a finding.
brand in the name “quickbooks”lure words (login, verify, secure…) “customer”
brand in the name “netflix”TLD with a high abuse rate “xyz”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3985 identical pages”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand in the name “disney”brand plus digits “disney777”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse (target: Disney), confidence 72%. An opinion, not a finding.
brand in the name “docusign”lure words (login, verify, secure…) “support”free DNS provider “dnsowl.com”
brand in the name “ebay”lure words (login, verify, secure…) “track,tracking”
brand in the name “ebay”lure words (login, verify, secure…) “track,tracking”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “ebay”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
brand in the name “ebay”lure words (login, verify, secure…) “track,tracking”
brand in the name “ebay”lure words (login, verify, secure…) “track,tracking”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “facebook”lure words (login, verify, secure…) “account”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: looks like abuse (target: Facebook), confidence 80%. An opinion, not a finding.
brand in the name “facebook”lure words (login, verify, secure…) “login”
brand in the name “zoom”brand plus digits “fangwin88-zoom”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
brand in the name “fedex”lure words (login, verify, secure…) “delivery”
Model opinion: looks like abuse (target: FedEx), confidence 80%. An opinion, not a finding.
brand in the name “fedex”lure words (login, verify, secure…) “parcel”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “secure”many hyphens “4”very long name “32”+1 more
one-letter brand typo “finance≈binance”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”+1 more
Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.
brand in the name “openai”TLD with a high abuse rate “skin”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”+1 more
brand in the name “gmail”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “google”lure words (login, verify, secure…) “locked”brand name behind Cloudflare “cloudflare.com”
brand in the name “google”TLD with a high abuse rate “xyz”brand in page title, not in the name “tiktok”brand name redirects elsewhere “tiktok.com”
Model opinion: looks like abuse (target: Google Classroom), confidence 70%. An opinion, not a finding.
brand in the name “google”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”+1 more
Model opinion: looks like abuse (target: Google), confidence 60%. An opinion, not a finding.