brand in the name “hubspot”brand plus digits “hubspotpreviewqa2-eu1”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Model opinion: looks benign, confidence 54%. An opinion, not a finding.
brand in the name “icloud”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: looks like abuse (target: Apple), confidence 80%. An opinion, not a finding.
brand in the name “icloud”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: looks like abuse (target: Apple), confidence 80%. An opinion, not a finding.
brand in the name “ledger”brand plus digits “identification91-ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Model opinion: unreachable when judged, confidence 41%. An opinion, not a finding.
many hyphens “3”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “kraken”brand plus digits “kraken-ocean777”brand name on a rarely-seen nameserver “atrustdns.com”brand name at a retail registrar “Dominet (HK) Limited”
Model opinion: suspicious, confidence 64%. An opinion, not a finding.
brand in the name “xbox”brand plus digits “m4xbox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Model opinion: suspicious, confidence 52%. An opinion, not a finding.
brand in the name “mercadopago”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious (target: mercadopago), confidence 68%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “migval16icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Model opinion: suspicious (target: icloud), confidence 70%. An opinion, not a finding.
brand in the name “netflix”TLD with a high abuse rate “sbs”brand name at a retail registrar “Web Commerce Communications Limited dba ”brand name at a watch-list registrar “Web Commerce Communications Limited dba ”
Model opinion: suspicious (target: netflix), confidence 40%. An opinion, not a finding.
brand in the name “netflix”brand plus digits “netflixtoto24jam”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”
Model opinion: looks like abuse (target: Netflix), confidence 70%. An opinion, not a finding.
brand in the name “linkedin”lure words (login, verify, secure…) “invoice”very long name “30”brand name at a retail registrar “Squarespace Domains II LLC”
Model opinion: suspicious (target: linkedin), confidence 57%. An opinion, not a finding.
page pushes urgent payment “Risk-Free”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “revolut”brand plus digits “revolutcasino1”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious (target: revolut), confidence 46%. An opinion, not a finding.
brand in the name “revolut”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “URL Solutions, Inc.”
Model opinion: unreachable when judged, confidence 72%. An opinion, not a finding.
brand in the name “roblox”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Registrar.eu”
Model opinion: suspicious (target: Roblox), confidence 65%. An opinion, not a finding.
brand in the name “roblox”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Eranet International Limited”
Model opinion: suspicious (target: roblox), confidence 58%. An opinion, not a finding.
brand in the name “schwab”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious, confidence 58%. An opinion, not a finding.
brand in the name “starlink”brand plus digits “starlink69”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks like abuse (target: Starlink (SpaceX)), confidence 60%. An opinion, not a finding.
brand in the name “stripe”TLD with a high abuse rate “click”brand name on a rarely-seen nameserver “awsdns-10.com”brand name at a retail registrar “Amazon Registrar, Inc.”
Model opinion: suspicious (target: Stripe), confidence 60%. An opinion, not a finding.
brand in the name “taobao”brand plus digits “taobaovip888”brand name at a retail registrar “Gname.com Pte. Ltd.”brand name at a watch-list registrar “Gname.com Pte. Ltd.”
Model opinion: looks like abuse (target: Taobao), confidence 70%. An opinion, not a finding.
TLD with a high abuse rate “sbs”page asks for credentials “Log in to your account”login form “has_form+login words”
Model opinion: looks like phishing (target: Wealthfront), confidence 86%. An opinion, not a finding.
brand in the name “whatsapp”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious, confidence 52%. An opinion, not a finding.
brand in the name “whatsapp”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
Model opinion: suspicious, confidence 48%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”
Model opinion: looks benign, confidence 77%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”
Model opinion: looks benign, confidence 77%. An opinion, not a finding.
brand spelled with digits “autofit4u→itau”brand plus digits “autofit4u”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: unreachable when judged, confidence 80%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand spelled with digits “fenixup88v4→bbva”brand plus digits “fenixup88v4”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: suspicious (target: bbva), confidence 53%. An opinion, not a finding.
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “google”
Model opinion: suspicious (target: Google), confidence 65%. An opinion, not a finding.
ambiguous brand word “ledger”lure words (login, verify, secure…) “update”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “ledger”
Model opinion: looks like phishing (target: Ledger), confidence 93%. An opinion, not a finding.
brand in the name “nintendo”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “nintendo”
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “roblox”
Model opinion: looks like abuse (target: Roblox), confidence 74%. An opinion, not a finding.
brand spelled with digits “sp3ctrum→spectrum”brand plus digits “sp3ctrum”brand name at a retail registrar “Global Domain Group LLC”
Model opinion: suspicious (target: Spectrum), confidence 65%. An opinion, not a finding.
brand in the name “spotify”brand name on a rarely-seen nameserver “69host.cc”brand name and brand-styled page “spotify”
Model opinion: looks like phishing (target: Spotify), confidence 94%. An opinion, not a finding.
brand in the name “tiktok”brand name behind Cloudflare “cloudflare.com”brand name and brand-styled page “tiktok”
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name and brand-styled page “whatsapp”
Model opinion: looks like abuse (target: WhatsApp), confidence 80%. An opinion, not a finding.
brand spelled with digits “wait4u→itau”brand plus digits “wait4u”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: suspicious (target: itau), confidence 40%. An opinion, not a finding.
TLD with a high abuse rate “top”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 70%. An opinion, not a finding.
brand in the name “barclays”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: barclays), confidence 74%. An opinion, not a finding.
brand in the name “barclays”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: barclays), confidence 74%. An opinion, not a finding.
brand in the name “barclays”brand name on a rarely-seen nameserver “nsnamedns.net”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
Model opinion: suspicious (target: barclays), confidence 74%. An opinion, not a finding.
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: binance), confidence 75%. An opinion, not a finding.
brand in the name “binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Model opinion: suspicious (target: binance), confidence 62%. An opinion, not a finding.
TLD with a high abuse rate “homes”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “workday”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious (target: workday), confidence 65%. An opinion, not a finding.
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
Model opinion: suspicious (target: ebay), confidence 42%. An opinion, not a finding.
brand in the name “stripe”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
Model opinion: suspicious (target: Stripe), confidence 65%. An opinion, not a finding.
brand in the name “chatgpt”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious, confidence 54%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand plus digits “cloud-computing1”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gabia, Inc.”
Model opinion: suspicious, confidence 46%. An opinion, not a finding.