brand in the name “amazon”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: suspicious (target: amazon), confidence 65%. An opinion, not a finding.
brand in the name “amazon”brand name at a retail registrar “DropCatch.com 1012 LLC”identical page on many newborns “23 identical pages”brand name redirects elsewhere “dropcatch.com”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “amazon”lure words (login, verify, secure…) “recover,recovery”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: amazon), confidence 75%. An opinion, not a finding.
brand in the name “xbox”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-b0”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-b1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 41%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-b2”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 45%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-b3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 42%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-f1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: Apple), confidence 65%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-j4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-k3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 41%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-l3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 47%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-l6”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-l8”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 40%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-m8”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 41%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-p1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: looks like abuse (target: Apple), confidence 60%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-p3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 45%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-p4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 44%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-p5”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 41%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-p6”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: Apple), confidence 65%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-p7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “aramex”lure words (login, verify, secure…) “support”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: aramex), confidence 88%. An opinion, not a finding.
one-letter brand typo “authropic≈anthropic”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”+1 more
Model opinion: looks like abuse (target: Anthropic), confidence 65%. An opinion, not a finding.
brand in the name “bankofamerica”lure words (login, verify, secure…) “login”
Model opinion: looks like phishing (target: Bank of America), confidence 86%. An opinion, not a finding.
brand in the name “barclays”lure words (login, verify, secure…) “help,portal”brand name on a rarely-seen nameserver “nsnamedns.net”
Model opinion: suspicious (target: barclays), confidence 83%. An opinion, not a finding.
one-letter brand typo “finance≈binance”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”+1 more
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “binance”lure words (login, verify, secure…) “airdrop”
Model opinion: suspicious (target: binance), confidence 62%. An opinion, not a finding.
brand in the name “binance”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Binance), confidence 60%. An opinion, not a finding.
brand in the name “workday”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious (target: Workday), confidence 60%. An opinion, not a finding.
brand in the name “canadapost”lure words (login, verify, secure…) “delivery”very long name “33”brand plus digits “canadapost-scheduledelivery753204”
Model opinion: suspicious (target: canadapost), confidence 77%. An opinion, not a finding.
brand in the name “metamask”lure words (login, verify, secure…) “support”very long name “28”brand plus digits “case4729183-metamask-support”+1 more
Model opinion: suspicious (target: metamask), confidence 70%. An opinion, not a finding.
brand in the name “chatgpt”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious (target: OpenAI (ChatGPT)), confidence 65%. An opinion, not a finding.
brand in the name “cloudflare”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Model opinion: suspicious (target: cloudflare), confidence 59%. An opinion, not a finding.
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Model opinion: suspicious (target: coinbase), confidence 82%. An opinion, not a finding.
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”TLD with a high abuse rate “work”free DNS provider “dnsowl.com”
Model opinion: suspicious (target: coinbase), confidence 69%. An opinion, not a finding.
brand in the name “coinbase”lure words (login, verify, secure…) “secure”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: coinbase), confidence 87%. An opinion, not a finding.
brand in the name “coinbase”lure words (login, verify, secure…) “wallet”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: coinbase), confidence 82%. An opinion, not a finding.
brand in the name “trustwallet”lure words (login, verify, secure…) “wallet”identical page on many newborns “312 identical pages”
Model opinion: looks like abuse (target: Trust Wallet), confidence 80%. An opinion, not a finding.
brand in the name “apple”lure words (login, verify, secure…) “confirm,id”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: apple), confidence 70%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
Model opinion: unreachable when judged, confidence 60%. An opinion, not a finding.
brand in the name “costco”lure words (login, verify, secure…) “reward,rewards”brand plus digits “costcowholesale-rewards6300”
Model opinion: suspicious (target: costco), confidence 74%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “mom”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+2 more
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “cfd”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”+1 more
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-132968475-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-248571963-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 56%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-259784103-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 51%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-361850294-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 56%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-495206718-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 52%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-583104729-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 54%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-670341829-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 51%. An opinion, not a finding.