brand in the name “cloudflare”brand name on a rarely-seen nameserver “febas.net”brand name at a retail registrar “InterNetX GmbH”
brand in the name “itau”brand name at a retail registrar “HOSTINGER operations, UAB”brand name at a watch-list registrar “HOSTINGER operations, UAB”
brand in page title, not in the name “wordpress”form on a brand-styled page “has_form”form submits over plain HTTP “http://jcs-haw.info/”
Model opinion: looks benign, confidence 72%. An opinion, not a finding.
brand in the name “kakao”brand name at a retail registrar “Spaceship, Inc.”brand name at a watch-list registrar “Spaceship, Inc.”
brand in the name “kakao”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “gmail”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”
lure words (login, verify, secure…) “access”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “SevenX LLC”
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 56%. An opinion, not a finding.
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OpusDNS GmbH”
brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OpusDNS GmbH”
page asks for credentials “Log in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 83%. An opinion, not a finding.
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks like a scam, confidence 86%. An opinion, not a finding.
brand in the name “metamask”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “microsoft”brand name on a rarely-seen nameserver “webd.pl”brand name at a retail registrar “Key-Systems GmbH”
brand in the name “microsoft”brand name at a retail registrar “Gname 304 Inc”brand name at a watch-list registrar “Gname 304 Inc”
page asks for credentials “Login to your account”login form “has_form+login words”
Model opinion: looks like a scam (target: Mikimoto), confidence 80%. An opinion, not a finding.
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “OpusDNS GmbH”
lure words (login, verify, secure…) “track”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “roblox”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
brand in the name “mercadolibre”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
page asks for credentials “Login to Your Account”login form “has_form+login words”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “starlink”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”+1 more
Model opinion: looks benign, confidence 50%. An opinion, not a finding.
page asks for credentials “Sign in to your account”login form “has_form+login words”
Model opinion: looks benign, confidence 69%. An opinion, not a finding.
brand in the name “itau”TLD with a high abuse rate “top”brand name behind Cloudflare “cloudflare.com”
Model opinion: looks like abuse, confidence 80%. An opinion, not a finding.
brand in the name “nvidia”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
Model opinion: suspicious, confidence 72%. An opinion, not a finding.
brand in the name “outlook”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “gmail”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “google”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
lure words (login, verify, secure…) “update”brand in page title, not in the name “nationwide”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 75%. An opinion, not a finding.
brand in the name “expedia”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”
brand in the name “linkedin”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Turkticaret.net Yazilim Hizmetleri Sanay”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 40%. An opinion, not a finding.
brand in the name “icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Name.com, Inc.”
brand in the name “whatsapp”brand name on a rarely-seen nameserver “kenpains.com”brand name at a retail registrar “Guizhou Zhongyu Zhike Network Technology”
brand in the name “quickbooks”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CNOBIN INFORMATION TECHNOLOGY LIMITED”
brand in the name “quickbooks”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloud DNS Ltd”
lure words (login, verify, secure…) “portal”brand in page title, not in the name “apple”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
one-letter brand typo “raikuten≈rakuten”TLD with a high abuse rate “beauty”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “raikuten≈rakuten”TLD with a high abuse rate “bond”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “raikuten≈rakuten”TLD with a high abuse rate “buzz”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “raikuten≈rakuten”TLD with a high abuse rate “cyou”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “raikuten≈rakuten”TLD with a high abuse rate “sbs”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “raikuten≈rakuten”TLD with a high abuse rate “xyz”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “rakiuten≈rakuten”TLD with a high abuse rate “icu”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “rakiuten≈rakuten”TLD with a high abuse rate “xyz”brand name at a retail registrar “NameMart Pte. Ltd.”
one-letter brand typo “rakutien≈rakuten”TLD with a high abuse rate “beauty”brand name at a retail registrar “NameMart Pte. Ltd.”