brand in the name “intesa”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 88%. An opinion, not a finding.
brand in the name “fidelity”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
brand in the name “fidelity”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
brand in the name “xbox”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Model opinion: looks like abuse (target: Xbox (Microsoft)), confidence 60%. An opinion, not a finding.
brand in the name “openai”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
brand in the name “revolut”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”many hyphens “3”TLD with a high abuse rate “click”+1 more
brand in the name “onedrive”TLD with a high abuse rate “click”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks like abuse (target: Proton Drive (Proton AG) / Microsoft OneDrive), confidence 70%. An opinion, not a finding.
brand in the name “tiktok”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar.eu”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “click”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
brand in the name “aramex”TLD with a high abuse rate “click”brand name at a retail registrar “NameMart Pte. Ltd.”
Model opinion: looks like abuse (target: Aramex), confidence 80%. An opinion, not a finding.
TLD with a high abuse rate “click”brand in page title, not in the name “workday”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “click”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 53%. An opinion, not a finding.
TLD with a high abuse rate “click”brand in page title, not in the name “google”form on a brand-styled page “has_form”
TLD with a high abuse rate “click”brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 69%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name at a retail registrar “GMO Internet, Inc. d/b/a Onamae.com”