9 open38 to send

ShopNova · ecommerce · shopnova.com · www.shopnova.com · edit ›

0
critical open
0
open findings
0
confirmed
0
domains examined
0
on watchlist
0
infrastructure maps
0
whitelisted
v3
baseline · Deep · custom

Scan this brand

track Deep custom parameters edit search rules ›
Look-alike siteson
dnstwist · ct · urlscan · TLDs all · up to 120 sites
Google searchon
6 approved queries · edit
Social mediaon
Facebook pages · Instagram profiles · up to 8 a scan · how far
Ads · scam shopson
Facebook / Instagram ads that sell the products, and the shops behind them
AI answerson
what ChatGPT, Gemini and Google AI Mode tell people · questions
Automatic scansoff
only when someone presses Start scan · set
Every scan: cloaking probes on · home / mobile IP probe always · AI second opinion on · re-check every 6h · markets US EN · fingerprint v3
scan specific URLs instead ▾
no scan visits more than 500 sites — the workspace limit · change it in Settings → Workspace & budget
or scan now, only one part — the rest of the track does not run

Latest findings all findings →

critical shopnova-login.com · open
critical 03-9817777 · open
critical facebook.com/shopnova.support.help · open
critical facebook.com/shopnova.support.help · open
critical shopnova-verification.com · confirmed
critical shopnova-refund.net · open
critical shopnova-giftcard.com · confirmed
critical instagram.com/shopnova.israel.official · confirmed
critical instagram.com/shopnova.israel.official · open
critical shopn0va.com · confirmed

Recent scans

StartedKindStateCost
2026-10-18 20:00:24 site intel done $0.0000
2026-10-18 07:32:12 brand scan done $0.0000
2026-10-18 07:32:06 brand scan done $0.0000
2026-10-18 07:29:25 brand scan done $0.0000
2026-10-18 07:29:19 brand scan done $0.0000
2026-10-18 06:29:19 brand scan done $0.0000
14 older scans
2026-10-14 09:53:07site inteldone$0.0000
2026-10-14 09:53:07infrastructure mapdone$0.0000
2026-10-14 09:53:04site inteldone$0.0000
2026-10-14 09:53:04infrastructure mapdone$0.0000
2026-10-14 09:53:01site inteldone$0.0000
2026-10-14 09:53:00infrastructure mapdone$0.0000
2026-10-14 09:52:57site inteldone$0.0000
2026-10-14 09:52:57infrastructure mapdone$0.0000
2026-10-14 09:52:53infrastructure mapdone$0.0000
2026-10-14 09:52:54site inteldone$0.0000
2026-10-14 09:52:51infrastructure mapdone$0.0000
2026-10-14 09:52:51site inteldone$0.0000
2026-10-14 09:52:48infrastructure mapdone$0.0000
2026-10-14 09:52:48site inteldone$0.0000

Attack-surface baseline ?

Official domainsshopnova.com, www.shopnova.com
Fetchedhttps://shopnova.com/ · HTTP 200
Brand keyshopnova
Favicon mmh3-2029202433
Screenshot pHashbe37c1cd4c483137
Keywordsshopnova shop smarter electronics home more
Google queries (AI proposal)shopnova login shopnova sign up shopnova support shopnova app shop nova login shop nova
What the AI thinks people and impostors search for, given the type of business. Only a proposal: Google is searched with the list approved in Google search queries (Scan setup tab).
Login / sign-up pages none linked from the homepage
password form found on the site: yes
official homepage

Threat mix · open

critical7
high1

Activity · 14 days

■ scans   ■ new findings

Which stream finds phishing

Certificate logs
18/103
Analyst URL scan
18/38
Facebook / Instagram ads
6/15
Facebook pages / Instagram profiles
6/8
AI answer (ChatGPT / Gemini / Google AI Mode)
5/5
Google search
3/3
Look-alike names
0/47

Watchlist states

new
12
watching
40
flagged (finding)
36
dismissed
108

Detection track & search rules · how deep the scan goes — streams, TLDs, Google queries, cadence, probes, thresholds, weights

Where its customers are · the countries and languages Google, the ads and the AI assistants are searched in — the brand's, kept when the track changes

Saved with the button below.
This brand deviates from its track. Switch off to go back to the pure track.

Discovery

Never more than the workspace limit, 500. Settings → Workspace & budget (an admin changes it).
Edited and approved in Google search queries ↓ — 6 approved.
Search countries and languages: “Where its customers are”, above.

Cadence

Full automatic scans — how often, when and what — are set in Automatic scans ↓.

Evasion & verdicts

Signal weights & group caps · advanced — the points behind every score, calibrated on the golden dataset; open to tune

Signal weights & group caps · calibrated on the golden dataset; security limits are not configurable here

Each fired signal adds its points; inside a group the total stops at the group's cap so correlated evidence is not double-counted. Raw 0–150 is normalised to a 0–100 risk score; combination rules can raise the severity.

Identity · does the name pretend to be the brand?

cap
brand name in the domain
brand_exact_in_domain
brand on another TLD
brand_tld_swap
brand in a subdomain
brand_in_subdomain
brand in the URL path
brand_in_path
fake app listing (title)
app_listing_brand_title
fake app listing (text)
app_listing_brand_description
look-alike characters
homoglyph_idn
brand + extra word
combosquat
1–2 typos away
levenshtein_le_2

Visual · does it look like the real site?

cap
identical favicon
favicon_exact
near-identical favicon
favicon_phash_near
brand logo on the page
logo_detected
looks like the real site
screenshot_similarity_ge_90
looks 85%+ like the real site
looks_like_brand_ge_85
cloned login form
login_dom_similarity
same colours
palette_match

Behaviour · what does the page try to make a victim do?

cap
page title claims the brand
title_claims_brand
asks for a password
credential_form
asks for card details
payment_form
asks for a wallet seed
seed_phrase_field
makes the visitor run a command
clickfix_lure
brand words in the text
brand_keywords_in_content
login-style URL
auth_path_in_url
urgent lure wording
lure_language
sends data elsewhere
external_form_action
pre-filled victim e-mail
password_prefill
forwards with an affiliate id
affiliate_redirect

Infrastructure · is it hosted alongside known phishing?

cap
bad-reputation network
bad_reputation_asn
shares a server with phishing
cohosted_with_known_phish
shares a certificate with phishing
cert_shared_with_phish
same tracking ID as phishing
tracking_id_shared
linked to a mapped attacker
linked_to_known_campaign
a flagged site redirects here
redirect_from_suspect
forwards through another host
redirect_via_third_party

Reputation · do public blocklists already know it?

cap
flagged on VirusTotal
vt_flagged
Cloudflare blocks it as phishing
cloudflare_phishing_warning
already flagged as phishing
known_phishing
listed on URLhaus
urlhaus_listed
listed on PhishTank
phishtank_listed
Google Safe Browsing warns
safe_browsing

Freshness · how new is it?

cap
registered < 7 days ago
age_lt_7d
registered < 30 days ago
age_lt_30d
certificate < 7 days old
cert_age_lt_7d
woke up while watched
woke_up_in_watch

Evasion · does it hide from scanners (cloaking)?

cap
hides from datacenter IPs
cloaking_ip_based
hides from scanners
cloaking_ua_based
needs a victim link
parameter_gating
needs a search referer
referer_gating
only a phone sees it
device_gating
blocks bots
bot_blocking

Google search queries · what BrandWatch types into Google on every scan — the AI proposes, you approve

Approved by admin · 2026-10-12 06:45 UTC — every scan uses this list.

Each scan searches the first 10 queries in US (en): up to 6 Google searches (SerpApi, about $0.06). Scheduled scans are off on this server, so Google is searched only when someone starts a scan. Every result is triaged before it is visited: the brand's own site and well-known platforms are skipped.

Automatic scans · ShopNova is scanned again by itself, as often as you choose, doing only what you tick

This server does not run automatic scans — its scheduler is off (SCHEDULER_ENABLED). The live server's start script switches it on; what you set here is saved either way.
last automatic scan: none yet next: — cost: up to $0.70 a run · $21.09 a month at this frequency

Paid calls (Google search, Facebook / Instagram ads and accounts) count against the workspace's daily spend limit; DNS, certificate logs, new domains and urlscan are free. Every automatic scan appears under “Recent scans” with its own console.

Social media & ads · how far to look · every page read is a paid SearchApi request

Facebook pages · Instagram profiles

Accounts under ShopNova's name that get the full look — page history, profile, logo, AI. About 3 requests each; the rest are listed, not judged. Social media is on for this brand.

Facebook / Instagram ads

ShopNova is sold by other shops: its ads are always read, for scam shops. The ad numbers and the shops checked in full are in the brand profile.

AI answers · what ChatGPT, Gemini and Google AI Mode tell people who ask for ShopNova’s phone, e-mail or login — every contact they give is checked against ShopNova’s own website

on for automatic scans 12 question(s) per run (questions × assistants) · about $0.1 with the follow-ups · SearchApi

Questions · approved by admin

Asked the way a customer would ask, in en. A contact that is not on ShopNova’s site gets a second question — “show me the official page, I suspect it is a fraud” — and BrandWatch opens every page cited.

en · customer-service phone
en · every way to contact
en · where to sign in
en · how to report fraud
Assistants asked

ShopNova’s real contacts · read from its website — 4 page(s), 2026-10-18 07:32

*6700short code shopnova.com/contact +1
*6711short code shopnova.com/contact +1
03-6000000phone shopnova.com/contact +1
+972506000000WhatsApp shopnova.com/contact +1
support@shopnova.come-mail shopnova.com/contact +1
up to 40 pages · free
Contacts ShopNova uses that the site does not show ⓘ

Edit brand · name, vertical and the official domains (the sites the scanner must never flag and compares look-alikes against)

One official domain per line — the first is the primary. App-store links (App Store, Google Play, Chrome Web Store …) are kept as the brand's official apps, not as domains.

Changing the official domains does not touch the whitelist or past findings; rebuild the baseline afterwards. Search rules and the detection track are in the Scan setup tab.

Brand profile · who sells ShopNova's products — decides whether BrandWatch hunts for scam shops in Facebook / Instagram ads

ProductPriceCurrencyCountry

—
Each page of the Ad Library is ~30 ads and one SearchApi request (~$0.004). A shop checked in full gets its company-registry lookup, two Google searches and the AI's opinion (~$0.02); the others get the free page checks only.

Regional campaigns · for a global brand with a site per country — one campaign per country, all protecting each other

Israel
ShopNova · Israel
shopnova.co.il · IL
2 open
open →
+ Add a country site by hand

The new campaign starts from this brand's track, scoring, ad keywords and prices for that country, then has its own set-up page (Google queries in its language, prices in its currency).

False-positive whitelist · partner / CDN / subsidiary domains that must never become findings

DomainKind
shopnova-partners.compartner

Start over · delete this brand with every candidate, finding, campaign, scan and evidence row it produced

Audit-log entries are kept. Add the brand again afterwards for a clean slate.