brand in the name “tiktok”brand name at a retail registrar “GoDaddy.com LLC”brand name and brand-styled page “tiktok”
Model opinion: looks like phishing (target: TikTok Shop), confidence 90%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “roblox”
Model opinion: looks benign, confidence 77%. An opinion, not a finding.
brand in the name “shopify”brand name at a retail registrar “Namify Domains Inc”brand name and brand-styled page “shopify”
Model opinion: looks like abuse (target: Shopify), confidence 70%. An opinion, not a finding.
brand in the name “slack”brand name at a retail registrar “Ascio Technologies, Inc. Danmark - Filia”brand name and brand-styled page “slack”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
brand in the name “taobao”TLD with a high abuse rate “autos”brand name and brand-styled page “taobao”
Model opinion: looks like abuse (target: Taobao), confidence 80%. An opinion, not a finding.
brand in the name “taobao”TLD with a high abuse rate “boats”brand name and brand-styled page “taobao”
Model opinion: looks like abuse, confidence 75%. An opinion, not a finding.
brand in the name “taobao”TLD with a high abuse rate “cyou”brand name and brand-styled page “taobao”
Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.
brand in the name “taobao”TLD with a high abuse rate “sbs”brand name and brand-styled page “taobao”
Model opinion: looks like abuse (target: Taobao), confidence 80%. An opinion, not a finding.
brand in the name “outlook”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “outlook”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “xbox”brand plus digits “xbox1”brand name and brand-styled page “xbox”
Model opinion: looks like abuse (target: Xbox (Microsoft)), confidence 66%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “405905coinbase”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “gmail”lure words (login, verify, secure…) “account,accounts,service,services”
brand in the name “gmail”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “icloud”brand plus digits “aurorarose1974icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “itau”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NicNames, Inc.”
brand in the name “cashapp”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “cashapp”brand plus digits “cashappspin7”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”
brand in the name “cashapp”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “chatgpt”brand plus digits “chatgptimage3”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “chatgpt”brand plus digits “chatgptimg3”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”+1 more
Model opinion: looks benign, confidence 69%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “classydude55icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
one-letter brand typo “finance≈binance”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1299 identical pages”
Model opinion: looks benign, confidence 86%. An opinion, not a finding.
brand in the name “disney”TLD with a high abuse rate “monster”brand name on a rarely-seen nameserver “gen.xyz”brand name at a retail registrar “TLD Registrar Solutions Ltd.”
Model opinion: looks like abuse (target: Disney+), confidence 80%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “fawneeeverett47ebygmail”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
TLD with a high abuse rate “sbs”page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 58%. An opinion, not a finding.
Highgogle.livescore 52echoes google· boilerplate page one-letter brand typo “gogle≈google”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “49 identical pages”brand name redirects elsewhere “href.li”
Model opinion: looks like abuse (target: Google), confidence 72%. An opinion, not a finding.
lure words (login, verify, secure…) “help”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in the name “icloud”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious, confidence 40%. An opinion, not a finding.
brand in the name “intuit”TLD with a high abuse rate “homes”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “leder≈ledger”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 71%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “maureens660icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “onedrive”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”brand name redirects elsewhere “1driv3r.fr”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “coinbase”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “xbox”brand plus digits “ps5xbox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “amazon”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “scotiabank”brand plus digits “scotiabank-2fadevices”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “icloud”TLD with a high abuse rate “icu”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
brand in the name “slack”TLD with a high abuse rate “click”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 54%. An opinion, not a finding.
brand in the name “linkedin”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “spectrum”brand plus digits “spectrum-ex1”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “eNom, LLC”
brand in the name “taobao”brand plus digits “taobao199”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
brand in the name “taobao”brand plus digits “taobaoke86”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
lure words (login, verify, secure…) “portal”TLD with a high abuse rate “lol”brand in page title, not in the name “ledger”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “onedrive”TLD with a high abuse rate “click”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “tiktok”brand plus digits “tiktok368”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “tiktok”brand plus digits “tiktok736”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
brand in the name “tiktok”TLD with a high abuse rate “xyz”brand name on a rarely-seen nameserver “whiteservers.net”brand name at a retail registrar “CV. Jogjacamp”
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”brand name redirects elsewhere “l.ink”
Model opinion: looks benign, confidence 64%. An opinion, not a finding.