one-letter brand typo “shopeo≈shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “EuroDNS S.A.”
brand in the name “disney”brand plus digits “snapchatcelebratesdisney100”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
one-letter brand typo “lcloud≈icloud”brand name at a retail registrar “Sav.com, LLC”brand name at a watch-list registrar “Sav.com, LLC”
one-letter brand typo “starline≈starling”brand name at a retail registrar “Sav.com, LLC - 47”brand name at a watch-list registrar “Sav.com, LLC - 47”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
one-letter brand typo “staylink≈starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc”
one-letter brand typo “sterling≈starling”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
one-letter brand typo “sterling≈starling”brand name on a rarely-seen nameserver “awsdns-12.com”brand name at a retail registrar “Amazon Registrar, Inc.”
one-letter brand typo “stride≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
one-letter brand typo “strive≈stripe”brand name at a retail registrar “Sav.com, LLC - 50”brand name at a watch-list registrar “Sav.com, LLC - 50”
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”
Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”
Model opinion: looks like a scam, confidence 80%. An opinion, not a finding.
one-letter brand typo “tiktook≈tiktok”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: looks like abuse (target: TikTok), confidence 77%. An opinion, not a finding.
page impersonates a brand “Binance”brand in page title, not in the name “binance”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
one-letter brand typo “trustvallet≈trustwallet”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “hulu”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”
Model opinion: looks benign, confidence 62%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Highvidia.techscore 42echoes nvidia· no web server one-letter brand typo “vidia≈nvidia”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”
Model opinion: looks like a scam, confidence 55%. An opinion, not a finding.
one-letter brand typo “wawmart≈walmart”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
punycode name “ōpenai scripts=LATIN”brand in the name “openai”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
punycode name “veriżon scripts=LATIN”brand in the name “verizon”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Highyyt.latscore 42· active website page impersonates a brand “Netflix”brand in page title, not in the name “chatgpt”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
ambiguous brand word “apple”TLD with a high abuse rate “bond”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”+1 more
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
ambiguous brand word “apple”TLD with a high abuse rate “quest”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”+1 more
Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “santander”brand plus digits “1santander-movil”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “717 identical pages”
Model opinion: looks like abuse (target: Santander), confidence 75%. An opinion, not a finding.
brand in the name “disney”identical page on many newborns “2246 identical pages”
Model opinion: looks like abuse (target: Disney), confidence 70%. An opinion, not a finding.
brand in the name “gmail”identical page on many newborns “2246 identical pages”
Model opinion: looks like abuse (target: Google (Gmail)), confidence 60%. An opinion, not a finding.
brand in the name “hulu”brand name at a retail registrar “Diamatrix C.C.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
brand in the name “hulu”brand name at a retail registrar “Diamatrix C.C.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
brand in the name “usaa”brand plus digits “pm68usaauthentic”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “2246 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
many hyphens “4”very long name “31”TLD with a high abuse rate “top”page impersonates a brand “Coinbase”
Model opinion: looks like a scam, confidence 90%. An opinion, not a finding.
Hightrezor.llcscore 40echoes trezor· boilerplate page brand in the name “trezor”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious (target: Trezor), confidence 72%. An opinion, not a finding.