brand in the name “whatsapp”lure words (login, verify, secure…) “portal”
punycode name “mobile-fußpflege-kaiserslautern scripts=”one-letter brand typo “mobile≈tmobile”very long name “30”form on a brand-styled page “has_form”+1 more
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
punycode name “mobile-fußpflege-neunkirchen scripts=LAT”one-letter brand typo “mobile≈tmobile”form on a brand-styled page “has_form”identical page on many newborns “1319 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
punycode name “mobile-fußpflege-saarbruecken scripts=LA”one-letter brand typo “mobile≈tmobile”very long name “28”form on a brand-styled page “has_form”+1 more
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
punycode name “mobile-fußpflege-stingbert scripts=LATIN”one-letter brand typo “mobile≈tmobile”form on a brand-styled page “has_form”identical page on many newborns “1319 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
punycode name “mobile-fußpflege-trier scripts=LATIN”one-letter brand typo “mobile≈tmobile”form on a brand-styled page “has_form”identical page on many newborns “1319 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
punycode name “mobile-fußpflege-voelklingen scripts=LAT”one-letter brand typo “mobile≈tmobile”form on a brand-styled page “has_form”identical page on many newborns “1319 identical pages”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “usaa”TLD with a high abuse rate “bond”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
brand in the name “apple”brand plus digits “apple-fb3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-xc0”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-zc1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “linkedin”brand name at a retail registrar “Porkbun”brand name at a watch-list registrar “Porkbun”identical page on many newborns “972 identical pages”
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “icloud-as7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “icloud”brand plus digits “icloud-ds6”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “icloud”brand plus digits “icloud-gf8”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “icloud”brand plus digits “icloud-hj9”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “icloud”brand plus digits “icloud-oi4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “icloud”brand plus digits “icloud-po5”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
one-letter brand typo “letflix≈netflix”form on a brand-styled page “has_form”brand name redirects elsewhere “expireddomains.com”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “511 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “gmail”lure words (login, verify, secure…) “account,accounts”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “tiktok”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “2884 identical pages”
Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.
brand in the name “revolut”lure words (login, verify, secure…) “service,services”brand name at a retail registrar “GoDaddy.com, LLC”
one-letter brand typo “starting≈starling”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “511 identical pages”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “telegram”brand plus digits “99g-telegram”brand name and brand-styled page “telegram”
Model opinion: suspicious (target: Telegram), confidence 55%. An opinion, not a finding.
brand in the name “anthropic”brand name at a retail registrar “GoDaddy.com, LLC”brand name and brand-styled page “anthropic”
Model opinion: suspicious (target: Anthropic), confidence 55%. An opinion, not a finding.
brand in the name “google”TLD with a high abuse rate “top”brand name and brand-styled page “google”
Model opinion: looks like abuse (target: Google), confidence 93%. An opinion, not a finding.
brand in the name “outlook”brand name at a retail registrar “Name.com, Inc.”brand name and brand-styled page “outlook”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “IONOS SE”brand name and brand-styled page “vanguard”
Model opinion: looks benign, confidence 86%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “IONOS SE”brand name and brand-styled page “vanguard”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “google”brand plus digits “187433google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “binance”brand plus digits “283745-binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “gmail”brand plus digits “9231gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gransy, s.r.o.”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “2884 identical pages”
one-letter brand typo “bakuten≈rakuten”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 93%. An opinion, not a finding.
ambiguous brand word “booking”lure words (login, verify, secure…) “confirm”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”+1 more
brand in the name “booking”brand plus digits “booking-toge123”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious, confidence 58%. An opinion, not a finding.
brand in the name “coinbase”TLD with a high abuse rate “cfd”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
one-letter brand typo “cooking≈booking”brand name at a retail registrar “Sav.com, LLC - 22”brand name at a watch-list registrar “Sav.com, LLC - 22”identical page on many newborns “1903 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
one-letter brand typo “finance≈binance”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “2884 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
one-letter brand typo “intera≈intesa”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”identical page on many newborns “1903 identical pages”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “klouise1111icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
one-letter brand typo “ledgera≈ledger”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “icloud”brand plus digits “lidiacavalcante78icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “coinbase”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “anthropic”TLD with a high abuse rate “xyz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CloudFlare, Inc.”identical page on many newborns “230 identical pages”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “netflix”brand plus digits “netflixtoto247”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”
Highniswap.orgscore 52echoes uniswap· parked, for sale one-letter brand typo “niswap≈uniswap”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “119 identical pages”brand name redirects elsewhere “urldance.com”
Model opinion: looks like abuse (target: Uniswap), confidence 72%. An opinion, not a finding.