brand in the name “apple”brand plus digits “apple-pg7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-pg8”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-uj1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-uj3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-uj4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “bybit”lure words (login, verify, secure…) “support”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
one-letter brand typo “goggle≈google”TLD with a high abuse rate “monster”form on a brand-styled page “has_form”
one-letter brand typo “cloud≈icloud”brand name at a retail registrar “Unstoppable Domains Inc”form on a brand-styled page “has_form”
Model opinion: looks like a scam, confidence 88%. An opinion, not a finding.
brand in the name “hulu”brand plus digits “huluxiongdi1”brand name behind Cloudflare “cloudflare.com”identical page on many newborns “78 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “metamask”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1203 identical pages”
Model opinion: looks like abuse (target: MetaMask), confidence 80%. An opinion, not a finding.
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 47%. An opinion, not a finding.
brand in the name “vanguard”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
TLD with a high abuse rate “fun”free DNS provider “dnsowl.com”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”
Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “chatgpt”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
brand in the name “binance”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1203 identical pages”
Model opinion: looks like abuse (target: Binance), confidence 65%. An opinion, not a finding.
brand in the name “anthropic”TLD with a high abuse rate “lol”brand name and brand-styled page “anthropic”
Model opinion: looks like a scam (target: Anthropic), confidence 85%. An opinion, not a finding.
brand in the name “anthropic”TLD with a high abuse rate “lol”brand name and brand-styled page “anthropic”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “anthropic”TLD with a high abuse rate “lol”brand name and brand-styled page “anthropic”
Model opinion: looks like a scam (target: Anthropic), confidence 90%. An opinion, not a finding.
brand in the name “binance”TLD with a high abuse rate “fun”brand name and brand-styled page “binance”
Model opinion: looks like abuse (target: Binance), confidence 60%. An opinion, not a finding.
brand in the name “roblox”brand name at a retail registrar “Register SPA”brand name and brand-styled page “roblox”
Model opinion: suspicious (target: Roblox), confidence 72%. An opinion, not a finding.
brand in the name “starlink”TLD with a high abuse rate “click”brand name and brand-styled page “starlink”
Model opinion: looks benign, confidence 86%. An opinion, not a finding.
brand in the name “telegram”brand name at a retail registrar “Hefei Juming Network Technology Co., Ltd”brand name and brand-styled page “telegram”
Model opinion: looks like abuse (target: Telegram), confidence 80%. An opinion, not a finding.
brand in the name “telegram”brand name at a retail registrar “Hefei Juming Network Technology Co., Ltd”brand name and brand-styled page “telegram”
Model opinion: suspicious (target: Telegram), confidence 72%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “541gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “TuringSign Inc. d/b/a Cosmotown”
page pushes urgent payment “Risk-Free”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 56%. An opinion, not a finding.
brand in the name “gmail”TLD with a high abuse rate “buzz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “gmail”TLD with a high abuse rate “buzz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “amazon”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
brand in the name “anthropic”brand plus digits “anthropic-s1-parsed”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “gmail”TLD with a high abuse rate “buzz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
many hyphens “3”TLD with a high abuse rate “top”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
brand in the name “gmail”TLD with a high abuse rate “buzz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “bbva”TLD with a high abuse rate “sbs”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”
brand in the name “gmail”brand plus digits “biondes2021gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Amazon Registrar, Inc.”
brand in the name “shopee”brand plus digits “bk168plusshopee”brand name behind Cloudflare “cloudflare.com”brand name redirects elsewhere “genautovip.com”
Model opinion: looks like abuse, confidence 88%. An opinion, not a finding.
brand in the name “gmail”brand plus digits “boyswag171gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “gmail”TLD with a high abuse rate “buzz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “cashapp”brand plus digits “cashappspin7”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “cashapp”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “GoDaddy.com, LLC”
brand in the name “gmail”TLD with a high abuse rate “buzz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
lure words (login, verify, secure…) “claim”TLD with a high abuse rate “xyz”brand in page title, not in the name “robinhood”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “gmail”TLD with a high abuse rate “buzz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “ebay”TLD with a high abuse rate “cyou”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
many hyphens “3”TLD with a high abuse rate “icu”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 48%. An opinion, not a finding.
brand in the name “costco”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo, LLC”brand name at a watch-list registrar “NameSilo, LLC”
one-letter brand typo “strike≈stripe”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3484 identical pages”
brand in the name “docusign”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “gmail”TLD with a high abuse rate “buzz”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “icloud”TLD with a high abuse rate “xyz”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Global Domain Group LLC”
TLD with a high abuse rate “top”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”form submits over plain HTTP “https://fafasuper863.top/”
Model opinion: looks like abuse, confidence 85%. An opinion, not a finding.