one-letter brand typo “whatapp≈whatsapp”TLD with a high abuse rate “rest”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot, LLC”+1 more
brand in the name “wordpress”lure words (login, verify, secure…) “service,services”
punycode name “reseñasgoogle scripts=LATIN”brand in the name “google”brand name at a retail registrar “Hosting Concepts B.V. d/b/a Registrar.eu”
brand in the name “zelle”brand name at a retail registrar “IONOS SE”form on a brand-styled page “has_form”identical page on many newborns “1533 identical pages”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
brand in the name “zelle”form on a brand-styled page “has_form”identical page on many newborns “1533 identical pages”
Model opinion: suspicious, confidence 50%. An opinion, not a finding.
brand in the name “usaa”lure words (login, verify, secure…) “service,services”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “NameCheap, Inc.”+1 more
TLD with a high abuse rate “top”free DNS provider “dnsowl.com”brand in page title, not in the name “google”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “apple”brand plus digits “apple-a7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-ak7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-ap7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-be3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-m4”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-qe3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-se3”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “apple-sl7”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
one-letter brand typo “mobile≈tmobile”brand name behind Cloudflare “cloudflare.com”brand in page title, not in the name “cloudflare”
brand in the name “chatgpt”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1357 identical pages”
Model opinion: looks like abuse (target: OpenAI (ChatGPT)), confidence 55%. An opinion, not a finding.
brand in the name “chatgpt”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1357 identical pages”
Model opinion: looks like abuse (target: OpenAI (ChatGPT)), confidence 60%. An opinion, not a finding.
brand in the name “chatgpt”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1357 identical pages”
Model opinion: looks like abuse (target: OpenAI (ChatGPT)), confidence 68%. An opinion, not a finding.
brand in the name “chatgpt”brand name at a retail registrar “Porkbun LLC”brand name at a watch-list registrar “Porkbun LLC”identical page on many newborns “1357 identical pages”
Model opinion: looks like abuse (target: OpenAI), confidence 60%. An opinion, not a finding.
one-letter brand typo “cloud≈icloud”TLD with a high abuse rate “fun”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 55%. An opinion, not a finding.
one-letter brand typo “ladger≈ledger”lure words (login, verify, secure…) “service”
brand in the name “apple”brand plus digits “fv1-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “fv2-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “fv5-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “hr0-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “hr1-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “hr9-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “kl1-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “kl3-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “kl7-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
brand in the name “apple”brand plus digits “kl9-apple”TLD with a high abuse rate “top”free DNS provider “dnsowl.com”
one-letter brand typo “ladger≈ledger”lure words (login, verify, secure…) “update”
brand in the name “icloud”lure words (login, verify, secure…) “login”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
one-letter brand typo “mobile≈tmobile”lure words (login, verify, secure…) “giveaway”
Highondrive.zipscore 54echoes onedrive· boilerplate page one-letter brand typo “ondrive≈onedrive”TLD with a high abuse rate “zip”brand name at a retail registrar “Tucows Domains Inc”identical page on many newborns “3315 identical pages”
Model opinion: looks like abuse (target: Microsoft), confidence 62%. An opinion, not a finding.
brand in the name “xbox”brand name behind Cloudflare “cloudflare.com”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 80%. An opinion, not a finding.
brand in the name “revolut”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “3154 identical pages”
brand in the name “roblox”brand name at a retail registrar “NameCheap, Inc.”brand name at a watch-list registrar “NameCheap, Inc.”identical page on many newborns “594 identical pages”
Model opinion: looks like abuse (target: Roblox), confidence 60%. An opinion, not a finding.
one-letter brand typo “trezon≈trezor”brand name at a retail registrar “VIRTUA DRUG Kutatási Szolgáltató Korláto”form on a brand-styled page “has_form”
Model opinion: suspicious, confidence 60%. An opinion, not a finding.
one-letter brand typo “twilico≈twilio”brand name at a retail registrar “GoDaddy.com, LLC”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 85%. An opinion, not a finding.
Highvericon.sitescore 54echoes verizon· registrar placeholder one-letter brand typo “vericon≈verizon”brand name at a retail registrar “Nics Telekomunikasyon A.S.”form on a brand-styled page “has_form”
Model opinion: looks benign, confidence 82%. An opinion, not a finding.
brand in the name “rakuten”brand name at a retail registrar “GMO Internet Group, Inc. d/b/a Onamae.co”brand name and brand-styled page “rakuten”
Model opinion: looks like abuse (target: Rakuten), confidence 80%. An opinion, not a finding.
brand in the name “coinbase”brand plus digits “382263coinbase”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “icloud”brand plus digits “47788-icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “binance”brand plus digits “494734binance”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “PDR Ltd. d/b/a PublicDomainRegistry.com”
brand in the name “gmail”brand plus digits “5959gmail”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Cloudflare, Inc.”
brand in the name “icloud”brand plus digits “748293-icloud”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “CNOBIN INFORMATION TECHNOLOGY LIMITED”
brand in the name “paypal”brand plus digits “872732-paypal”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”
brand in the name “amazon”brand plus digits “amazon6-ai”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dominet (HK) Limited”