brand in the name “walmart”lure words (login, verify, secure…) “access”page impersonates a brand “PayPal”brand name and brand-styled page “walmart”+1 more
Model opinion: looks like phishing (target: Walmart), confidence 95%. An opinion, not a finding.
brand in the name “adobe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”brand in page title, not in the name “namecheap”
Model opinion: suspicious (target: Adobe), confidence 55%. An opinion, not a finding.
brand in the name “tiktok”brand name and brand-styled page “tiktok”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: TikTok), confidence 95%. An opinion, not a finding.
brand in the name “robinhood”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 85%. An opinion, not a finding.
one-letter brand typo “robinwood≈robinhood”many hyphens “3”very long name “30”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 86%. An opinion, not a finding.
brand in the name “ebay”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “paypal”lure words (login, verify, secure…) “security”many hyphens “3”identical page on many newborns “78 identical pages”
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “116 identical pages”
Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.
brand in the name “tiktok”brand plus digits “tiktok66”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “vanguard”brand name at a retail registrar “Synergy Wholesale Accreditations Pty Ltd”identical page on many newborns “282 identical pages”
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
brand in the name “ionos”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Model opinion: suspicious, confidence 65%. An opinion, not a finding.
brand in the name “xbox”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “xbox”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “intuit”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “xbox”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Model opinion: looks like abuse (target: Microsoft Xbox), confidence 55%. An opinion, not a finding.
brand in the name “xbox”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “roblox”brand name on a rarely-seen nameserver “dichvucheap.vn”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”
brand in the name “xbox”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: suspicious (target: Netflix), confidence 72%. An opinion, not a finding.
one-letter brand typo “icioud≈icloud”brand name on a rarely-seen nameserver “hostwindsdns.com”brand name at a retail registrar “Atak Domain Bilgi Teknolojileri A.Ş.”
Hightrexor.sitescore 42echoes trezor· robots.txt denied one-letter brand typo “trexor≈trezor”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
page impersonates a brand “MetaMask”brand in page title, not in the name “robinhood”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
lure words (login, verify, secure…) “account,service,services”page impersonates a brand “IRS”