one-letter brand typo “6pectrum≈spectrum”brand plus digits “6pectrum”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 60%. An opinion, not a finding.
one-letter brand typo “6pectrum≈spectrum”brand plus digits “6pectrum”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious (target: Spectrum (Charter Communications)), confidence 55%. An opinion, not a finding.
one-letter brand typo “6pectrum≈spectrum”brand plus digits “6pectrum”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks like abuse (target: Spectrum (Charter Communications)), confidence 60%. An opinion, not a finding.
one-letter brand typo “6pectrum≈spectrum”brand plus digits “6pectrum”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious (target: Spectrum (Charter Communications)), confidence 55%. An opinion, not a finding.
one-letter brand typo “6pectrum≈spectrum”brand plus digits “6pectrum”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious (target: Spectrum (Charter Communications)), confidence 55%. An opinion, not a finding.
one-letter brand typo “6pectrum≈spectrum”brand plus digits “6pectrum”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
High6pectrum.vipscore 55echoes spectrum· registrar placeholder one-letter brand typo “6pectrum≈spectrum”brand plus digits “6pectrum”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “832195coinbase”random-looking name “H=3.81”brand name behind Cloudflare “cloudflare.com”+2 more
Model opinion: suspicious (target: coinbase), confidence 71%. An opinion, not a finding.
brand in the name “apple”lure words (login, verify, secure…) “account,accounts,support”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: apple), confidence 77%. An opinion, not a finding.
brand in the name “adobe”lure words (login, verify, secure…) “secure”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: adobe), confidence 83%. An opinion, not a finding.
brand in the name “amazon”brand plus digits “amazon080”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Gname.com Pte. Ltd.”+1 more
Model opinion: suspicious (target: amazon), confidence 80%. An opinion, not a finding.
brand in the name “amazon”lure words (login, verify, secure…) “alert”brand plus digits “amazonalert24”brand name at a retail registrar “GoDaddy.com, LLC”
Model opinion: suspicious (target: amazon), confidence 83%. An opinion, not a finding.
brand in the name “amazon”lure words (login, verify, secure…) “alert,alerts”brand plus digits “amazonalerts365”
Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.
brand in the name “amazon”lure words (login, verify, secure…) “service,services”
Model opinion: suspicious (target: amazon), confidence 84%. An opinion, not a finding.
brand in the name “amazon”TLD with a high abuse rate “lol”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
Model opinion: suspicious (target: amazon), confidence 72%. An opinion, not a finding.
brand in the name “amazon”free DNS provider “dnsowl.com”brand name at a retail registrar “NameSilo”brand name at a watch-list registrar “NameSilo”+1 more
Model opinion: looks like abuse (target: Amazon), confidence 80%. An opinion, not a finding.
brand in the name “apple”lure words (login, verify, secure…) “account,verify”brand name behind Cloudflare “cloudflare.com”
Model opinion: suspicious (target: apple), confidence 71%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-uo1”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 44%. An opinion, not a finding.
brand in the name “ebay”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 88%. An opinion, not a finding.
brand in the name “apple”brand plus digits “au2-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”+2 more
Model opinion: suspicious (target: apple), confidence 45%. An opinion, not a finding.
brand in the name “whatsapp”lure words (login, verify, secure…) “auth”many hyphens “3”
Model opinion: suspicious (target: whatsapp), confidence 84%. An opinion, not a finding.
brand in the name “barclays”lure words (login, verify, secure…) “portal”
brand in the name “bbva”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”form on a brand-styled page “has_form”
one-letter brand typo “bihance≈binance”lure words (login, verify, secure…) “airdrop”brand name on a rarely-seen nameserver “pql.net”
brand in the name “binance”TLD with a high abuse rate “fun”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
one-letter brand typo “mobile≈tmobile”TLD with a high abuse rate “click”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NAMECHEAP”+1 more
brand in the name “bybit”lure words (login, verify, secure…) “helpdesk”free DNS provider “dnsowl.com”
brand in the name “canadapost”TLD with a high abuse rate “click”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “3963 identical pages”
Model opinion: looks like abuse (target: Canada Post), confidence 77%. An opinion, not a finding.
brand in the name “whatsapp”lure words (login, verify, secure…) “auth”
brand in the name “whatsapp”lure words (login, verify, secure…) “login”
brand in the name “tiktok”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”+1 more
brand in the name “citibank”lure words (login, verify, secure…) “access”
brand in the name “robinhood”lure words (login, verify, secure…) “claim,reward,rewards”
one-letter brand typo “cloud≈icloud”nameserver domain born the same day “finops-outreach.com”brand name on a rarely-seen nameserver “finops-outreach.com”
brand in the name “cloudflare”lure words (login, verify, secure…) “confirm”
brand in the name “coinbase”lure words (login, verify, secure…) “reward”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”+2 more
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”+1 more
Model opinion: looks benign, confidence 86%. An opinion, not a finding.
brand in the name “ledger”lure words (login, verify, secure…) “customer”brand name behind Cloudflare “cloudflare.com”
brand spelled with digits “d0cusignn→docusign”brand plus digits “d0cusignn”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Tucows Domains Inc.”
brand in the name “disney”brand plus digits “disneytoto10”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameSilo, LLC”+1 more
brand in the name “docusign”lure words (login, verify, secure…) “secure”TLD with a high abuse rate “icu”brand name behind Cloudflare “cloudflare.com”
brand in the name “usaa”lure words (login, verify, secure…) “service”TLD with a high abuse rate “bond”brand name behind Cloudflare “cloudflare.com”
brand in the name “usaa”lure words (login, verify, secure…) “service”TLD with a high abuse rate “cyou”brand name behind Cloudflare “cloudflare.com”
one-letter brand typo “fcloud≈icloud”lure words (login, verify, secure…) “service,services”
brand in the name “fidelity”brand name at a retail registrar “Global Domain Group LLC”brand in page title, not in the name “cloudflare”
Model opinion: looks like abuse (target: Fidelity Investments), confidence 70%. An opinion, not a finding.
brand in the name “fidelity”TLD with a high abuse rate “click”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “3963 identical pages”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
one-letter brand typo “finance≈binance”lure words (login, verify, secure…) “service”many hyphens “4”very long name “29”+1 more
one-letter brand typo “finance≈binance”TLD with a high abuse rate “sbs”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NICENIC INTERNATIONAL GROUP CO., LIMITED”+1 more
brand in the name “whatsapp”form on a brand-styled page “has_form”brand name redirects elsewhere “yandex.com”
Model opinion: looks like abuse (target: WhatsApp), confidence 77%. An opinion, not a finding.
brand in the name “google”lure words (login, verify, secure…) “alert”brand plus digits “googlealert365”