brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 90%. An opinion, not a finding.
brand in the name “ebay”brand name on a rarely-seen nameserver “zudhost.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “fidelity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “fidelity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “mercadopago”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “fidelity”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “netflix”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “nvidia”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
ambiguous brand word “okta”lure words (login, verify, secure…) “login”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
Highopenmi.topscore 44echoes openai· active website one-letter brand typo “openmi≈openai”TLD with a high abuse rate “top”brand name at a retail registrar “阿里云计算有限公司”
Model opinion: looks benign, confidence 65%. An opinion, not a finding.
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 54%. An opinion, not a finding.
lure words (login, verify, secure…) “confirm”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in the name “cashapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “EuroDNS S.A.”
brand in the name “paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “roblox”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “sharepoint”brand name on a rarely-seen nameserver “awsdns-23.net”brand name at a retail registrar “Amazon Registrar, Inc.”
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Namify Domains Inc”
brand in the name “fidelity”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
brand in the name “gmail”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “binance”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: looks like a scam (target: YouTube), confidence 80%. An opinion, not a finding.
brand in the name “revolut”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: looks like a scam (target: YouTube), confidence 80%. An opinion, not a finding.
brand in the name “roblox”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “MAT BAO CORPORATION”
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “icloud”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “santander”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “schwab”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Realtime Register B.V.”
brand in the name “scotiabank”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”brand name at a watch-list registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”
brand in the name “adobe”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in the name “whatsapp”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “shopify”brand name on a rarely-seen nameserver “hostcry.com”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
one-letter brand typo “shopme≈shopee”brand name at a retail registrar “GoDaddy.com, LLC”brand name redirects elsewhere “railway.app”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Domain Science Kutatasi Szolgaltato Korl”brand name redirects elsewhere “expireddomains.com”
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: suspicious, confidence 42%. An opinion, not a finding.
brand in the name “slack”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
brand in the name “slack”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
brand in the name “slack”brand name on a rarely-seen nameserver “namesecure.com”brand name at a retail registrar “NameSecure L.L.C.”
brand in the name “smbc”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 64%. An opinion, not a finding.
brand in the name “smbc”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 58%. An opinion, not a finding.
brand in the name “smbc”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 68%. An opinion, not a finding.
brand in the name “smbc”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
Model opinion: looks benign, confidence 45%. An opinion, not a finding.
brand in the name “shopee”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”