one-letter brand typo “linkedyn≈linkedin”brand in page title, not in the name “linkedin”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: LinkedIn), confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “515 identical pages”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
one-letter brand typo “hubslot≈hubspot”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “37 identical pages”brand name redirects elsewhere “minocasino12.com”
Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.
brand in the name “nvidia”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in page title, not in the name “facebook”form on a brand-styled page “has_form”form submits over plain HTTP “https://www.fbxxl.space/”
Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “trexor≈trezor”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in page title, not in the name “ledger”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
lure words (login, verify, secure…) “alert,alerts”page impersonates a brand “Netflix”
page asks for credentials “Sign in to your account”
page impersonates a brand “Netflix”
page impersonates a brand “Microsoft 365”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in the name “bybit”brand name behind Cloudflare “cloudflare.com”
brand in page title, not in the name “google”
brand in page title, not in the name “robinhood”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “ledger”
brand in page title, not in the name “anthropic”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “whatsapp”
brand in page title, not in the name “ledger”
brand in page title, not in the name “namecheap”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “telegram”
brand in page title, not in the name “ledger”
brand in page title, not in the name “whatsapp”
brand in page title, not in the name “cloudflare”
brand in page title, not in the name “whatsapp”
brand in page title, not in the name “cloudflare”
punycode name “шкатулка scripts=CYRILLIC”
punycode name “спорт scripts=CYRILLIC”
punycode name “trý scripts=LATIN”
page pushes urgent payment “Limited time offer”
login form “has_form+login words”
login form “has_form+login words”
login form “has_form+login words”
page pushes urgent payment “act Now”
login form “has_form+login words”
login form “has_form+login words”
lure words (login, verify, secure…) “recover,recovery”
many hyphens “3”very long name “29”