brand in the name “revolut”brand plus digits “revolutcasino1”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious (target: revolut), confidence 46%. An opinion, not a finding.
brand in the name “schwab”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious, confidence 58%. An opinion, not a finding.
brand in the name “taobao”brand plus digits “taobaovip888”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Model opinion: looks like abuse (target: Taobao), confidence 70%. An opinion, not a finding.
brand in the name “whatsapp”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious, confidence 52%. An opinion, not a finding.
brand in the name “whatsapp”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious, confidence 48%. An opinion, not a finding.
brand spelled with digits “autofit4u→itau”brand plus digits “autofit4u”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: unreachable when judged, confidence 80%. An opinion, not a finding.
brand spelled with digits “fenixup88v4→bbva”brand plus digits “fenixup88v4”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: suspicious (target: bbva), confidence 53%. An opinion, not a finding.
brand in the name “spotify”brand name on a rarely-seen nameserver “69host.cc”brand name and brand-styled page “spotify”
Model opinion: looks like phishing (target: Spotify), confidence 94%. An opinion, not a finding.
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name and brand-styled page “whatsapp”
Model opinion: looks like abuse (target: WhatsApp), confidence 80%. An opinion, not a finding.
brand in the name “barclays”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: barclays), confidence 74%. An opinion, not a finding.
brand in the name “barclays”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: barclays), confidence 74%. An opinion, not a finding.
brand in the name “barclays”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: barclays), confidence 74%. An opinion, not a finding.
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: binance), confidence 75%. An opinion, not a finding.
brand in the name “workday”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious (target: workday), confidence 65%. An opinion, not a finding.
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious, confidence 54%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-computing1”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gabia, Inc.”
Model opinion: suspicious, confidence 46%. An opinion, not a finding.
brand in the name “starlink”brand in page title, not in the name “wordpress”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “netflix”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: netflix), confidence 46%. An opinion, not a finding.
lure words (login, verify, secure…) “service,services”brand in page title, not in the name “airbnb”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “fedex”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: suspicious (target: fedex), confidence 57%. An opinion, not a finding.
brand in the name “stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: suspicious (target: stripe), confidence 59%. An opinion, not a finding.
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Model opinion: suspicious (target: gmail), confidence 57%. An opinion, not a finding.
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: ebay), confidence 46%. An opinion, not a finding.
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: ebay), confidence 52%. An opinion, not a finding.
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: ebay), confidence 42%. An opinion, not a finding.
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: suspicious (target: icloud), confidence 62%. An opinion, not a finding.
brand in the name “coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: coinbase), confidence 66%. An opinion, not a finding.
brand in the name “paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: paypal), confidence 58%. An opinion, not a finding.
brand in the name “usps”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
Model opinion: suspicious (target: usps), confidence 59%. An opinion, not a finding.
brand in the name “santander”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: santander), confidence 72%. An opinion, not a finding.
brand in the name “santander”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: santander), confidence 76%. An opinion, not a finding.
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: google), confidence 64%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious, confidence 45%. An opinion, not a finding.
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: binance), confidence 75%. An opinion, not a finding.
brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious (target: starlink), confidence 54%. An opinion, not a finding.
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious, confidence 44%. An opinion, not a finding.
brand in the name “vanguard”brand name on a rarely-seen nameserver “site4now.net”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: suspicious (target: Vanguard), confidence 65%. An opinion, not a finding.
brand in the name “wellsfargo”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “coinbase”brand plus digits “358972coinbase”random-looking name “H=3.81”brand name behind Cloudflare “cloudflare.com”
brand in the name “intuit”lure words (login, verify, secure…) “account”very long name “51”random-looking name “H=3.75”
brand in the name “chatgpt”identical page on many newborns “177 identical pages”brand name redirects elsewhere “dropcatch.com”
Model opinion: looks like abuse (target: OpenAI), confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “finance≈binance”brand name on a rarely-seen nameserver “olitt.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “etsy”lure words (login, verify, secure…) “wallet”brand name at a retail registrar “Gransy, s.r.o.”
brand in the name “itau”lure words (login, verify, secure…) “access”brand name at a retail registrar “Gransy, s.r.o.”
one-letter brand typo “mobile≈tmobile”brand name on a rarely-seen nameserver “rapidenet.ca”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”