brand in the name “venmo”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”+1 more
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”
Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.
one-letter brand typo “kkraken≈kraken”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
one-letter brand typo “lesjardins≈desjardins”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”brand name at a watch-list registrar “Alibaba Cloud Computing Ltd. d/b/a HiChi”
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 42%. An opinion, not a finding.
one-letter brand typo “lloyd≈lloyds”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
very long name “32”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 62%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 68%. An opinion, not a finding.
page impersonates a brand “Microsoft 365”brand in page title, not in the name “microsoft”
Model opinion: looks benign, confidence 83%. An opinion, not a finding.
one-letter brand typo “mercadolivre≈mercadolibre”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Key-Systems GmbH”
one-letter brand typo “mizuno≈mizuho”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloud Yuqu LLC”
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: suspicious (target: Netflix), confidence 60%. An opinion, not a finding.
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
page impersonates a brand “PayPal”brand in page title, not in the name “paypal”
Model opinion: looks benign, confidence 59%. An opinion, not a finding.
page impersonates a brand “Binance”brand in page title, not in the name “binance”
Model opinion: looks benign, confidence 46%. An opinion, not a finding.
page impersonates a brand “PayPal”brand in page title, not in the name “google”
Model opinion: looks like a scam, confidence 62%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
very long name “30”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 50%. An opinion, not a finding.
brand in the name “playstation”very long name “37”brand name at a retail registrar “GoDaddy.com, LLC”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “stride≈stripe”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 68%. An opinion, not a finding.
brand in the name “revolut”very long name “32”brand name at a retail registrar “Tucows Domains Inc.”
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”
page impersonates a brand “DHL”brand in page title, not in the name “shopify”
Model opinion: looks benign, confidence 58%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar of Domain Names REG.RU LLC”
lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “xyz”page impersonates a brand “PayPal”
Model opinion: suspicious, confidence 65%. An opinion, not a finding.
page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 48%. An opinion, not a finding.
page impersonates a brand “Binance”brand in page title, not in the name “binance”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “stride≈stripe”brand name on a rarely-seen nameserver “awsdns-06.org”brand name at a retail registrar “Amazon Registrar, Inc.”
one-letter brand typo “strike≈stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
page impersonates a brand “Netflix”brand in page title, not in the name “tesla”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
page impersonates a brand “Binance”brand in page title, not in the name “telegram”
Model opinion: suspicious, confidence 65%. An opinion, not a finding.
one-letter brand typo “finance≈binance”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “etsy”brand plus digits “32001021etsyfoaqdc285”random-looking name “H=3.84”TLD with a high abuse rate “top”+1 more
lure words (login, verify, secure…) “bonus,winner”TLD with a high abuse rate “sbs”brand in page title, not in the name “cloudflare”
brand in the name “ebay”identical page on many newborns “4103 identical pages”
brand in the name “ebay”identical page on many newborns “1826 identical pages”
brand in the name “usaa”identical page on many newborns “4190 identical pages”
brand in the name “amazon”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”identical page on many newborns “175 identical pages”