brand in the name “robinhood”TLD with a high abuse rate “work”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “robinwood≈robinhood”many hyphens “3”very long name “30”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 86%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “homes”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Model opinion: looks like abuse (target: Western Digital), confidence 55%. An opinion, not a finding.
brand spelled with digits “3bayimk→ebay”brand plus digits “3bayimk”TLD with a high abuse rate “top”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “ledger”brand plus digits “430761-ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Model opinion: suspicious, confidence 48%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “712742coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious (target: coinbase), confidence 68%. An opinion, not a finding.
brand in the name “ledger”brand plus digits “810511-ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious, confidence 57%. An opinion, not a finding.
brand in the name “shopify”many hyphens “3”brand plus digits “abmqax-8x-myshopify-com”brand name at a retail registrar “Namify Domains Inc”+1 more
Model opinion: looks like abuse (target: Shopify), confidence 72%. An opinion, not a finding.
brand in the name “whatsapp”lure words (login, verify, secure…) “access”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: whatsapp), confidence 84%. An opinion, not a finding.
brand in the name “whatsapp”lure words (login, verify, secure…) “account”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: whatsapp), confidence 78%. An opinion, not a finding.
brand in the name “adobe”lure words (login, verify, secure…) “support”
Model opinion: suspicious (target: adobe), confidence 65%. An opinion, not a finding.
brand in the name “amazon”brand plus digits “amazoniaindex2021”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious, confidence 57%. An opinion, not a finding.
brand in the name “amazon”TLD with a high abuse rate “xyz”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand spelled with digits “app-1-europa→apple”brand plus digits “app-1-europa”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “3358 identical pages”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “tiktok”many hyphens “3”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+2 more
Model opinion: looks like abuse (target: TikTok), confidence 88%. An opinion, not a finding.
brand in the name “barclays”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: barclays), confidence 86%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “pay”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: looks like abuse (target: Binance), confidence 80%. An opinion, not a finding.
brand in the name “binance”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”brand in page title, not in the name “cloudflare”
Model opinion: looks like abuse (target: Binance), confidence 80%. An opinion, not a finding.
brand spelled with digits “bo0king-pay→booking”lure words (login, verify, secure…) “pay”brand plus digits “bo0king-pay”TLD with a high abuse rate “xyz”+1 more
Model opinion: suspicious (target: Booking.com), confidence 72%. An opinion, not a finding.
brand in the name “bybit”lure words (login, verify, secure…) “pay”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”
Model opinion: looks like abuse (target: Bybit), confidence 72%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “carewchi0611icloud”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”+1 more
brand in the name “coinbase”lure words (login, verify, secure…) “pay”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”
Model opinion: looks like abuse (target: Coinbase), confidence 80%. An opinion, not a finding.
brand in the name “coinbase”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
brand in the name “coinbase”lure words (login, verify, secure…) “security”
brand in the name “google”many hyphens “6”very long name “55”brand plus digits “com-utmsource-google-campaign-5645542-ke”+3 more
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “costco”lure words (login, verify, secure…) “reward,rewards”brand plus digits “costcowholesale-rewards8002”
brand in the name “ebay”form on a brand-styled page “has_form”identical page on many newborns “1585 identical pages”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “ebay”form on a brand-styled page “has_form”identical page on many newborns “1585 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”brand plus digits “d2r-mobile”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
brand in the name “whatsapp”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: WhatsApp), confidence 60%. An opinion, not a finding.
brand in the name “docusign”lure words (login, verify, secure…) “support”
Model opinion: looks like abuse (target: DocuSign), confidence 80%. An opinion, not a finding.
brand in the name “docusign”lure words (login, verify, secure…) “portal”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “docusign”TLD with a high abuse rate “click”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand spelled with digits “e84yd9→ebay”brand plus digits “e84yd9”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “ebay”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “microsoft”very long name “28”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “booking”brand plus digits “eu-639201845-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
brand spelled with digits “exit4u→itau”brand plus digits “exit4u”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
brand in the name “gmail”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo,LLC”+1 more
brand in the name “fidelity”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “auth”many hyphens “4”very long name “28”
one-letter brand typo “finance≈binance”form on a brand-styled page “has_form”identical page on many newborns “1585 identical pages”
Model opinion: looks like abuse (target: Cogedim), confidence 68%. An opinion, not a finding.
one-letter brand typo “finance≈binance”form on a brand-styled page “has_form”identical page on many newborns “1585 identical pages”
Model opinion: looks like abuse (target: Cogedim), confidence 65%. An opinion, not a finding.
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “portal”many hyphens “4”very long name “31”
brand in the name “etsy”brand in page title, not in the name “ebay”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 68%. An opinion, not a finding.
brand in the name “etsy”brand in page title, not in the name “ebay”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “instagram”TLD with a high abuse rate “lol”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”+1 more
Model opinion: looks benign, confidence 80%. An opinion, not a finding.