page asks for credentials “Sign in to your account”brand in page title, not in the name “lazada”form on a brand-styled page “has_form”
Model opinion: looks like phishing (target: Lazada), confidence 92%. An opinion, not a finding.
brand in the name “verizon”brand name and brand-styled page “verizon”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Verizon), confidence 60%. An opinion, not a finding.
brand in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “1163 identical pages”
Model opinion: suspicious (target: TikTok), confidence 55%. An opinion, not a finding.
brand in the name “fidelity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “2678 identical pages”
Model opinion: looks like abuse (target: Fidelity Express), confidence 60%. An opinion, not a finding.
brand in the name “telegram”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “telegram”
Model opinion: looks like phishing (target: Telegram), confidence 86%. An opinion, not a finding.
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “outlook”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “amazon”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “openai”brand name on a rarely-seen nameserver “awsdns-30.org”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
free DNS provider “dnsowl.com”brand in page title, not in the name “phantom”form on a brand-styled page “has_form”
brand in the name “binance”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
one-letter brand typo “betflix≈netflix”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
brand in the name “hulu”brand plus digits “123drohnenschulung”brand name at a retail registrar “InterNetX GmbH”identical page on many newborns “57 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 40%. An opinion, not a finding.
lure words (login, verify, secure…) “service,services”very long name “38”page impersonates a brand “IRS”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in page title, not in the name “roblox”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in page title, not in the name “facebook”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”
brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “spectrum”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “google”form on a brand-styled page “has_form”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
brand in page title, not in the name “booking”form on a brand-styled page “has_form”
brand in page title, not in the name “apple”form on a brand-styled page “has_form”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”
brand in page title, not in the name “uber”form on a brand-styled page “has_form”
brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
brand in the name “starlink”brand name at a retail registrar “Tucows Domains Inc.”
brand in page title, not in the name “spotify”form on a brand-styled page “has_form”
brand in page title, not in the name “shopify”form on a brand-styled page “has_form”
brand in the name “usps”brand name at a retail registrar “Key-Systems GmbH”
punycode name “déjouerlescontes scripts=LATIN”brand in page title, not in the name “wordpress”
brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
brand in page title, not in the name “hostinger”identical page on many newborns “43 identical pages”
lure words (login, verify, secure…) “alert”page impersonates a brand “IRS”
lure words (login, verify, secure…) “track”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “service,services”login form “has_form+login words”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “cloudflare”
lure words (login, verify, secure…) “security”brand in page title, not in the name “wordpress”
lure words (login, verify, secure…) “recover,recovery,service,services”free DNS provider “dnsowl.com”
lure words (login, verify, secure…) “update”brand in page title, not in the name “cloudflare”