one-letter brand typo “qoogle≈google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “canadapost”brand plus digits “canadapostreschedule1”identical page on many newborns “129 identical pages”
Model opinion: looks like abuse (target: Canada Post), confidence 82%. An opinion, not a finding.
brand in the name “costco”brand name at a retail registrar “Namify Domains Inc”form on a brand-styled page “has_form”brand name redirects elsewhere “empiregroup.ug”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “gmail”very long name “32”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “facebook”form on a brand-styled page “has_form”
Model opinion: looks like abuse (target: Facebook), confidence 65%. An opinion, not a finding.
brand in the name “shopify”many hyphens “3”brand plus digits “find-9915-myshopify-com”brand in page title, not in the name “cloudflare”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
brand in the name “intuit”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “980 identical pages”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
one-letter brand typo “openssa≈opensea”brand in page title, not in the name “booking”
Model opinion: looks benign, confidence 63%. An opinion, not a finding.
one-letter brand typo “opensi≈openai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: suspicious (target: OpenAI), confidence 72%. An opinion, not a finding.
one-letter brand typo “pawpal≈paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “revolut”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 53%. An opinion, not a finding.
Highrobloxx.orgscore 48echoes roblox· registrar placeholder brand in the name “roblox”brand name at a retail registrar “InterNetX GmbH”identical page on many newborns “178 identical pages”
Model opinion: looks like abuse (target: Roblox), confidence 70%. An opinion, not a finding.
one-letter brand typo “finance≈binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “tiktok”brand name at a retail registrar “Wild West Domains, LLC”identical page on many newborns “3168 identical pages”
Model opinion: looks like abuse (target: TikTok), confidence 60%. An opinion, not a finding.
lure words (login, verify, secure…) “taxes”page impersonates a brand “IRS”brand in page title, not in the name “nationwide”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “leder≈ledger”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
Highxmazon.orgscore 48echoes amazon· active website one-letter brand typo “xmazon≈amazon”brand in page title, not in the name “wordpress”
Model opinion: looks like abuse (target: Amazon), confidence 60%. An opinion, not a finding.
punycode name “送88 scripts=CJK”TLD with a high abuse rate “top”page impersonates a brand “MetaMask”
Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”many hyphens “3”brand plus digits “zephyr-cloud-drift-9b4e2c”brand name behind Cloudflare “cloudflare.com”
brand in the name “taobao”brand plus digits “0539taobao”brand name at a retail registrar “DomainGetter LLC”
TLD with a high abuse rate “click”brand in page title, not in the name “tiktok”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “icu”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
brand in the name “whatsapp”brand plus digits “40paisawhatsapp”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “binance”brand plus digits “694923-binance”free DNS provider “dnsowl.com”
brand in the name “amazon”brand plus digits “amazon4d-z”brand name at a retail registrar “Tucows Domains Inc.”
TLD with a high abuse rate “cam”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “xyz”brand in page title, not in the name “whatsapp”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
brand in the name “vanguard”brand name at a retail registrar “Porkbun”brand name at a watch-list registrar “Porkbun”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 68%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-1xs”TLD with a high abuse rate “xyz”
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”
TLD with a high abuse rate “work”brand in page title, not in the name “shopify”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 92%. An opinion, not a finding.
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
TLD with a high abuse rate “win”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “telegrem≈telegram”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “3168 identical pages”
Model opinion: looks like abuse (target: Telegram), confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
TLD with a high abuse rate “cyou”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 60%. An opinion, not a finding.
TLD with a high abuse rate “xyz”brand in page title, not in the name “instagram”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
TLD with a high abuse rate “click”brand in page title, not in the name “booking”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 56%. An opinion, not a finding.
TLD with a high abuse rate “xyz”brand in page title, not in the name “chatgpt”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 89%. An opinion, not a finding.
brand in the name “ebay”TLD with a high abuse rate “fun”brand name at a retail registrar “Name.com, Inc.”
Model opinion: suspicious, confidence 45%. An opinion, not a finding.
TLD with a high abuse rate “cam”brand in page title, not in the name “twitter”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.
TLD with a high abuse rate “top”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 40%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Domain Bazaar LLC”identical page on many newborns “980 identical pages”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “booking”brand plus digits “grandmayfair3-booking”brand name at a retail registrar “Wix.com Ltd.”
TLD with a high abuse rate “xyz”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 95%. An opinion, not a finding.
TLD with a high abuse rate “rest”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 40%. An opinion, not a finding.
one-letter brand typo “imobile≈tmobile”brand name at a retail registrar “GoDaddy.com, LLC”identical page on many newborns “3168 identical pages”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
TLD with a high abuse rate “cfd”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 41%. An opinion, not a finding.