brand in the name “booking”brand plus digits “eu-716392840-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 51%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-827413650-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 51%. An opinion, not a finding.
brand in the name “booking”brand plus digits “eu-904627135-booking”TLD with a high abuse rate “homes”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious, confidence 52%. An opinion, not a finding.
brand in the name “sharepoint”many hyphens “3”TLD with a high abuse rate “work”free DNS provider “dnsowl.com”+1 more
Model opinion: looks like abuse (target: Microsoft), confidence 80%. An opinion, not a finding.
brand in the name “sharepoint”many hyphens “3”TLD with a high abuse rate “work”free DNS provider “dnsowl.com”+3 more
Model opinion: looks like abuse (target: Microsoft), confidence 77%. An opinion, not a finding.
one-letter brand typo “expedita≈expedia”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”+2 more
Model opinion: looks like abuse, confidence 65%. An opinion, not a finding.
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: unreachable when judged, confidence 62%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”lure words (login, verify, secure…) “service”brand name on a rarely-seen nameserver “awsdns-12.com”
Model opinion: suspicious, confidence 68%. An opinion, not a finding.
brand in the name “tiktok”lure words (login, verify, secure…) “reward,rewards”identical page on many newborns “133 identical pages”
Model opinion: looks like abuse (target: TikTok), confidence 77%. An opinion, not a finding.
brand in the name “gmail”lure words (login, verify, secure…) “account,accounts”
Model opinion: suspicious (target: gmail), confidence 82%. An opinion, not a finding.
brand in the name “google”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
Model opinion: suspicious (target: google), confidence 81%. An opinion, not a finding.
brand in the name “google”lure words (login, verify, secure…) “security,service,services”brand name at a retail registrar “Namify Domains Inc”
Model opinion: suspicious (target: google), confidence 62%. An opinion, not a finding.
brand in the name “google”lure words (login, verify, secure…) “service,services”TLD with a high abuse rate “xyz”
Model opinion: suspicious (target: google), confidence 83%. An opinion, not a finding.
one-letter brand typo “goole≈google”lure words (login, verify, secure…) “reset”identical page on many newborns “4103 identical pages”
Model opinion: looks like abuse (target: Google), confidence 78%. An opinion, not a finding.
brand in the name “schwab”lure words (login, verify, secure…) “service,services”
Model opinion: suspicious (target: schwab), confidence 76%. An opinion, not a finding.
brand in the name “schwab”lure words (login, verify, secure…) “service,services”form on a brand-styled page “has_form”identical page on many newborns “1755 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “schwab”lure words (login, verify, secure…) “service,services”form on a brand-styled page “has_form”identical page on many newborns “1755 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “hsbc”lure words (login, verify, secure…) “service,services”
Model opinion: suspicious (target: hsbc), confidence 87%. An opinion, not a finding.
brand in the name “hulu”lure words (login, verify, secure…) “login”
Model opinion: suspicious (target: hulu), confidence 82%. An opinion, not a finding.
brand in the name “hulu”brand plus digits “huluxia2”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious, confidence 46%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “i9-icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”+1 more
Model opinion: suspicious (target: icloud), confidence 63%. An opinion, not a finding.
brand in the name “icloud”lure words (login, verify, secure…) “id”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: icloud), confidence 82%. An opinion, not a finding.
brand in the name “instagram”lure words (login, verify, secure…) “reset”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: suspicious (target: instagram), confidence 76%. An opinion, not a finding.
brand in the name “intuit”very long name “29”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
one-letter brand typo “idcloud≈icloud”lure words (login, verify, secure…) “recover”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: icloud), confidence 58%. An opinion, not a finding.
one-letter brand typo “idcloud≈icloud”lure words (login, verify, secure…) “recover”TLD with a high abuse rate “xyz”
Model opinion: suspicious (target: Apple), confidence 72%. An opinion, not a finding.
brand in the name “ledger”lure words (login, verify, secure…) “official”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious (target: ledger), confidence 88%. An opinion, not a finding.
brand in the name “ledger”lure words (login, verify, secure…) “verification”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”+1 more
Model opinion: looks like abuse (target: Ledger), confidence 75%. An opinion, not a finding.
brand in the name “lineme”lure words (login, verify, secure…) “member,members”TLD with a high abuse rate “xyz”
Model opinion: suspicious, confidence 76%. An opinion, not a finding.
brand in the name “linkedin”brand name at a retail registrar “Wix.com Ltd.”brand in page title, not in the name “cloudflare”
Model opinion: looks like abuse (target: LinkedIn), confidence 62%. An opinion, not a finding.
brand spelled with digits “mailit4u→itau”brand plus digits “mailit4u”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: Itau), confidence 65%. An opinion, not a finding.
brand in the name “xbox”TLD with a high abuse rate “buzz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”+1 more
Model opinion: suspicious, confidence 45%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “id”brand name on a rarely-seen nameserver “dtag.de”
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “id”brand name on a rarely-seen nameserver “dtag.de”
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “msilver660icloud”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “costco”lure words (login, verify, secure…) “reward,rewards”brand plus digits “mycostcorewards1174”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
Model opinion: suspicious (target: costco), confidence 70%. An opinion, not a finding.
brand in the name “trezor”TLD with a high abuse rate “xyz”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Trezor), confidence 80%. An opinion, not a finding.
brand in the name “nintendo”many hyphens “3”very long name “29”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: suspicious, confidence 59%. An opinion, not a finding.
brand in the name “nintendo”lure words (login, verify, secure…) “portal”TLD with a high abuse rate “xyz”
Model opinion: suspicious (target: nintendo), confidence 81%. An opinion, not a finding.
brand in the name “bradesco”lure words (login, verify, secure…) “portal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Sav.com, LLC”+1 more
Model opinion: suspicious (target: bradesco), confidence 77%. An opinion, not a finding.
brand in the name “stripe”lure words (login, verify, secure…) “official”TLD with a high abuse rate “xyz”
Model opinion: suspicious (target: stripe), confidence 78%. An opinion, not a finding.
brand spelled with digits “ok7ai66w→okta”brand plus digits “ok7ai66w”TLD with a high abuse rate “top”brand name at a retail registrar “Dominet (HK) Limited”
Model opinion: suspicious (target: okta), confidence 54%. An opinion, not a finding.
brand in the name “linkedin”lure words (login, verify, secure…) “invoice”
Model opinion: suspicious (target: linkedin), confidence 76%. An opinion, not a finding.
brand in the name “paypal”lure words (login, verify, secure…) “pay”many hyphens “3”
Model opinion: suspicious (target: paypal), confidence 81%. An opinion, not a finding.
one-letter brand typo “phantoms≈phantom”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “gmail”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
Model opinion: suspicious (target: Google), confidence 65%. An opinion, not a finding.
brand in the name “revolut”brand plus digits “revolutioncasino24”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 65%. An opinion, not a finding.
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”+1 more
Model opinion: suspicious (target: revolut), confidence 52%. An opinion, not a finding.
brand in the name “santander”lure words (login, verify, secure…) “support”
Model opinion: suspicious (target: santander), confidence 89%. An opinion, not a finding.
brand in the name “schwab”lure words (login, verify, secure…) “secure”brand plus digits “schwab-secure0100”brand name behind Cloudflare “cloudflare.com”+1 more
Model opinion: suspicious (target: schwab), confidence 87%. An opinion, not a finding.