shopnova-outlet-store.com
A .com shop selling ShopNova products. It has no privacy policy, terms or returns page and it names no company at all. Google knows nothing about the business outside the shop itself.
What do I do · get it taken down
change the conclusion
Notes · for you and the next analyst — kept with the finding, never edited, also in Activity
No notes yet.
Conclusion · how sure are we that it sells fakes? — every letter and report claims only this
BrandWatch reads “Suspicious shop” because: the seller is anonymous — no company details, or nothing about it on Google.
What would move it up:
- evidence about the goods: a price at half the official one or less, or reviews that say the goods are fake
- for “Confirmed counterfeit”: a test purchase, the brand's inspection of the product, or a platform's confirmation
Concluded by admin · 2026-10-14 09:52
Shop checks · is this a real seller of ShopNova products? · separate from the phishing score (shop-v2-d92668ce)
AI: is this shop legitimate? · advisory, never part of the score
- no privacy policy, terms or returns page linked from the shop's page
- no company name or registration number anywhere on the page
- Google finds nothing about “shopnova-outlet-store.com” outside the shop itself
reviews mention fake or replica products
Where it was found
Country IL · page language he
Explain Finding — why it was flagged · every signal, its points and the evidence behind it
| Signal | Group | Points | Evidence |
|---|---|---|---|
| no privacy / terms / returns shop_no_policy_pages | Contact & policies | +12 | no privacy policy, terms or returns page linked from the shop's page |
| no company details shop_no_company_details | Seller | +10 | no company name or registration number anywhere on the page |
| no footprint on Google shop_no_web_presence | Seller | +10 | Google finds nothing about “shopnova-outlet-store.com” outside the shop itself |
How the score adds up
⚙ deterministic · versioned Raw 32 of 100 → normalised to 32 / 100.
Thresholds: Medium 25 · High 50 · Critical 75 · scoring shop-v2-d92668ce
open the arithmetic ↗ — this site's section of the scan trace
Group caps ? · stop correlated evidence from double counting
Confidence ? · 65%
| Breadth (2 independent groups) | +50 |
| Hard confirmers | +0 |
| Evidence completeness | +15 |
| Provider agreement | +0 |
| Unavailable evidence | 0 |
| Single weak signal | 0 |
Suspect vs. official similarity 50%


Cloaking multi-probe ? ⚙ Tier 3/4 multi-probe
| Probe | Profile | Login form | Diverged | Note |
|---|---|---|---|---|
| bot | bot | yes | same | |
| param | datacenter | yes | same | |
| referer | referer | yes | same |
Fetched several ways — a crawler user-agent, a victim-style link (?email=), a Google referer, a phone (when chosen in Settings → Proxy) and a real home or phone-network IP (Tier 4). Residential (Tier 4): not_needed. Residential IPs are used to look, never to interact.
VirusTotal · security vendors
Server reputation · AbuseIPDB
Categories
JARM
Engines flagged first
| Engine | Category | Result | Method |
|---|---|---|---|
| BitDefender | harmless | clean | blacklist |
| CRDF | harmless | clean | blacklist |
| ESET | harmless | clean | blacklist |
| Fortinet | harmless | clean | blacklist |
| Google Safebrowsing | harmless | clean | blacklist |
| Kaspersky | harmless | clean | blacklist |
| Netcraft | harmless | clean | blacklist |
| OpenPhish | harmless | clean | blacklist |
| Phishtank | harmless | clean | blacklist |
| Quttera | harmless | clean | blacklist |
| Sophos | harmless | clean | blacklist |
| Webroot | harmless | clean | blacklist |
Look it up elsewhere
Each link opens the external service's own page for this site — nothing is sent from here beyond the name in the URL.
Registration data (RDAP)
- Name
- shopnova-outlet-store.com
- registration
- 2024-04-27
- Status
- —
- DNSSEC
- —
Registrar & abuse contact
- Registrar
- Mock Registrar LLC
- Abuse email
- —
- registrant org
- REDACTED FOR PRIVACY
Nameservers
—Current WHOIS record (VirusTotal)
WHOIS history · every WHOIS snapshot WhoisXML has recorded for shopnova-outlet-store.com
Who registered the domain, when, through which registrar, and every change since: transfers, new owners, re-registration after expiry, privacy switched on or off. Phishers often register with their real details and hide them a day later — that first snapshot is a lead.
First registered
Snapshots
Owners seen
Registrars
Owner details now
TIMELINE
- 2024-04-27Registered with privacy onregistrant shown as 'REDACTED FOR PRIVACY' · via Mock Registrar LLC · first WHOIS snapshot 2024-04-28
SNAPSHOTS · CHANGED FIELDS MARKED
| Seen | Registrar | Registrant | Created · expires |
|---|---|---|---|
| 2024-04-28 | Mock Registrar LLC | hidden · REDACTED FOR PRIVACY | 2024-04-27 · 2027-04-27 |
raw WHOIS · 2024-04-28Domain Name: SHOPNOVA-OUTLET-STORE.COM
Registrar: Mock Registrar LLC
Creation Date: 2024-04-27T00:00:00Z
Updated Date: 2024-04-28T00:00:00Z
Registry Expiry Date: 2027-04-27T00:00:00Z
Registrant Organization: REDACTED FOR PRIVACY
Registrant Name:
Registrant Email:
Name Server: NS1.MOCK-DNS.EXAMPLE
Name Server: NS2.MOCK-DNS.EXAMPLE | |||
Source: WhoisXML WHOIS History API (whois-history.whoisxmlapi.com) · cached 24 h · fetched .
DNS records source: VirusTotal
A records are the servers hosting the site — click one to see everything else hosted there. NS tells you who runs its DNS (Cloudflare nameservers hide the real origin).
| Type | TTL | Value |
|---|---|---|
| A | 300 | 203.0.113.121 |
| AAAA | 300 | 2001:db8::8281 |
| NS | 21600 | ns1.mock-dns.example |
| NS | 21600 | ns2.mock-dns.example |
| MX | 3600 | mail.shopnova-outlet-store.com prio 10 |
| SOA | 1800 | ns1.mock-dns.example rname hostmaster.shopnova-outlet-store.com · serial 2026100801 |
HTTPS certificate from VirusTotal
- Common name
- shopnova-outlet-store.com
- Issuer
- C=US O=Mock Trust Services CN=MT1
- Valid
- 2026-09-20 00:00:00 → 2026-12-19 00:00:0032% of the validity period elapsed
- Alt names (2)
- shopnova-outlet-store.com www.shopnova-outlet-store.com
- SHA-256
- b712a2651064238b73da770a9b7624d799e85bca2e12b077b035df0eb8328c91 · crt.sh ↗
serial, signature, key, TLS and the full certificate
- Subject
- CN=shopnova-outlet-store.com
- Serial
- 62582029
- Signature
- sha256ECDSA
- Public key
- EC secp256r1
- SHA-1
- 8045d035fadcc8847085bb37c77fc56d958bdf16
203.0.113.121
Abuse reports · AbuseIPDB — what other defenders reported about this server in the last 90 days
SITES HOSTED ON THIS SERVER (passive DNS, each with its own detections)
| Last resolved | Detections | Domain | |
|---|---|---|---|
| 2026-10-13 | 5/ 95 | shopnova-deals.com | VT ↗ · urlscan ↗ |
| 2026-10-07 | 5/ 95 | verify-account-3121.xyz | VT ↗ · urlscan ↗ |
| 2026-10-09 | 0/ 90 | secure-login-3121.top | VT ↗ · urlscan ↗ |
| 2026-10-11 | 0/ 90 | shopnova-outlet-store.com | VT ↗ · urlscan ↗ |
| 2026-10-03 | 0/ 90 | support-desk-3121.site | VT ↗ · urlscan ↗ |
| 2026-10-05 | 0/ 90 | wallet-sync-3121.online | VT ↗ · urlscan ↗ |
COMMUNICATING FILES not fetched yet
IP WHOIS record
engine verdicts for this IP (12)
| Engine | Category | Result |
|---|---|---|
| BitDefender | harmless | clean |
| CRDF | harmless | clean |
| ESET | harmless | clean |
| Fortinet | harmless | clean |
| Google Safebrowsing | harmless | clean |
| Kaspersky | harmless | clean |
| Netcraft | harmless | clean |
| OpenPhish | harmless | clean |
| Phishtank | harmless | clean |
| Quttera | harmless | clean |
| Sophos | harmless | clean |
| Webroot | harmless | clean |
urlscan.io scan
domains contacted by the page (2)
Similar sites 30
Other pages urlscan has seen that share this site's page hash (same kit), its server, or the brand name.
Same page (identical document hash) 4hash:c783b70f09429f5d8138ea46e573e7d3c19c5aec92792797dcce88b98ba8c265
the same HTML served elsewhere — the same phishing kit
| Seen | Verdict | Domain | Title | |
|---|---|---|---|---|
| 2026-09-16 | — | urlscan ↗ · VT ↗ | shopn0va.com - Sign in | |
| 2026-09-15 | — | urlscan ↗ · VT ↗ | shopnova-login.com - Sign in | |
| 2026-09-14 | — | urlscan ↗ · VT ↗ | secure-shopnova.com - Sign in | |
| 2026-09-08 | — | urlscan ↗ · VT ↗ | shopnova.co - Sign in |
Same server 0page.ip:203.0.113.66
other pages scanned on the same IP
noneSame brand name 26page.domain:*shopnova*
domains containing the brand name
| Seen | Verdict | Domain | Title | |
|---|---|---|---|---|
| 2026-10-14 | — | urlscan ↗ · VT ↗ | shopnova-partners.com - Sign in | |
| 2026-10-13 | — | urlscan ↗ · VT ↗ | shopnova-blog.net - Sign in | |
| 2026-10-12 | — | urlscan ↗ · VT ↗ | shopnovafans.com - Sign in | |
| 2026-10-11 | — | urlscan ↗ · VT ↗ | shopnova-reviews.com - Sign in | |
| 2026-10-10 | — | urlscan ↗ · VT ↗ | shopnova-careers.com - Sign in | |
| 2026-10-09 | — | urlscan ↗ · VT ↗ | shopnova-deals.com - Sign in | |
| 2026-10-08 | — | urlscan ↗ · VT ↗ | shopnova-status.com - Sign in | |
| 2026-10-07 | — | urlscan ↗ · VT ↗ | shopnova-community.org - Sign in | |
| 2026-10-06 | — | urlscan ↗ · VT ↗ | shopnova-press.com - Sign in | |
| 2026-10-05 | — | urlscan ↗ · VT ↗ | shopnova-events.com - Sign in | |
| 2026-09-24 | — | urlscan ↗ · VT ↗ | shopnova.com - Sign in | |
| 2026-09-23 | — | urlscan ↗ · VT ↗ | www.shopnova.com - Sign in | |
| 2026-09-22 | — | urlscan ↗ · VT ↗ | shopnova.co.il - Sign in | |
| 2026-09-13 | — | urlscan ↗ · VT ↗ | shopnova-verify.com - Sign in | |
| 2026-09-10 | — | urlscan ↗ · VT ↗ | shopnova-account.net - Sign in | |
| 2026-09-09 | — | urlscan ↗ · VT ↗ | shopnova-support-center.com - Sign in | |
| 2026-09-06 | — | urlscan ↗ · VT ↗ | shopnova-giftcard.com - Sign in | |
| 2026-09-05 | — | urlscan ↗ · VT ↗ | shopnova-refund.net - Sign in | |
| 2026-09-04 | — | urlscan ↗ · VT ↗ | shopnova-verification.com - Sign in | |
| 2026-09-03 | — | urlscan ↗ · VT ↗ | shopnova--sneakers.com - Sign in | |
| 2026-09-02 | — | urlscan ↗ · VT ↗ | shopnova-eu.com - Sign in | |
| 2026-09-01 | — | urlscan ↗ · VT ↗ | shopnova-id-check.com - Sign in | |
| 2026-08-20 | — | urlscan ↗ · VT ↗ | shopnova-support.com - Sign in | |
| 2026-08-19 | — | urlscan ↗ · VT ↗ | shopnova-review.com - Sign in | |
| 2026-08-18 | — | urlscan ↗ · VT ↗ | shopnova-coupons.com - Sign in |
Passive DNS replication 1
Every IP this domain has resolved to, with how many engines flag that IP. Click an IP to see the other sites on it.
| Date resolved | Detections (IP) | IP |
|---|---|---|
| 2026-09-27 | 3/ 92 | 203.0.113.121 |
Subdomains 3
| Host | Detections |
|---|---|
| login.shopnova-outlet-store.com | 2/ 92 |
| mail.shopnova-outlet-store.com | 0/ 90 |
| www.shopnova-outlet-store.com | 0/ 90 |
Communicating files 0 not fetched yet
Malware samples that contacted this domain while being analysed.
Historical WHOIS · VirusTotal 1
- Registrant Organization
- REDACTED FOR PRIVACY
- Registrant Country
- US
- Name Server
- NS1.MOCK-DNS.EXAMPLE
Historical certificates 0 VT · 2 CT not fetched yet
CERTIFICATE TRANSPARENCY (crt.sh / CertSpotter) — the registrable domain and its subdomains
| Not before | Names | Issuer |
|---|---|---|
| 2026-09-30 | shopnova-outlet-store.com, www.shopnova-outlet-store.com | C=US, O=Let's Encrypt, CN=R3 |
| 2026-09-01 | mail0.shopnova-outlet-store.com-cdn.net | Mock CA |
Observation timeline
- 2026-10-12 06:41:52 · HTTP 200 · state new · datacenter · content changed · 0321bfcd813d · screenshot
- 2026-10-12 06:41:57 · HTTP 200 · state flagged · datacenter · 0321bfcd813d · screenshot
- 2026-10-12 06:46:05 · HTTP 200 · state flagged · datacenter · 0321bfcd813d · screenshot
- 2026-10-12 06:46:10 · HTTP 200 · state flagged · datacenter · 0321bfcd813d · screenshot
first seen 2026-10-12 06:41 · scans 4 · next 2026-10-12 12:46 · candidate state flagged · WHOIS history →
Score history
| When | Score | Severity | Confidence | Version |
|---|---|---|---|---|
| 2026-10-12 06:41:52 | 32 | medium | 65% | shop-v2-d92668ce |
| 2026-10-12 06:41:57 | 32 | medium | 65% | shop-v2-d92668ce |
| 2026-10-12 06:46:05 | 32 | medium | 65% | shop-v2-d92668ce |
| 2026-10-12 06:46:10 current | 32 | medium | 65% | shop-v2-d92668ce |
Evidence · chain of custody ? ⚙ immutable · DB-enforced
Append-only by the database: UPDATE and DELETE are rejected by triggers, even for an admin. Every artifact is stored under its own SHA-256, so the hash is literally the file name — any tampering is visible. Role: primary = proves a signal · supporting = corroborates · contradicting = argues the site is legitimate · context = background.
| Observed (UTC) | Type | Role | Source | SHA-256 | Details | |
|---|---|---|---|---|---|---|
| 2026-10-12 06:46:10 | http · referer view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: referer status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:46:10 | http · param view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: param status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:46:10 | http · bot view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: bot status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:46:10 | reputation | contradicting | mock:safebrowsing | — | status: negative | |
| 2026-10-12 06:46:10 | reputation | context | mock:urlhaus | — | status: unknown | |
| 2026-10-12 06:46:10 | reputation | context | mock:virustotal | — | status: unknown | |
| 2026-10-12 06:46:10 | whois | context | mock:rdap | — | status: positive | |
| 2026-10-12 06:46:10 | favicon | context | mock:playwright | 8c5699b43adb8a9c | mmh3: -810764581 phash: 99cc6533936ccc93 | artifact |
| 2026-10-12 06:46:10 | screenshot · datacenter view | context | mock:playwright | 9bb7d56280e38f15 | phash: c913965e4de34a1e dhash: c034638333318861 palette: ['#f4f8f7', '#edf3f2', '#fc… | artifact |
| 2026-10-12 06:46:10 | html · datacenter view | primary | mock:playwright | 0321bfcd813d9c44 | title: ShopNova Outlet — Checkout forms: 1 parked: False | artifact |
| 2026-10-12 06:46:10 | http | supporting | mock:playwright | 0321bfcd813d9c44 | status: 200 final_url: https://shopnova-outlet-sto… content_type: text/html; charset=utf-8 | |
| 2026-10-12 06:46:10 | dns | supporting | mock:local_dns | — | status: positive |
show all 48 evidence rows from 4 scan(s)
| 2026-10-12 06:46:05 | http · referer view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: referer status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:46:05 | http · param view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: param status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:46:05 | http · bot view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: bot status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:46:05 | reputation | contradicting | mock:safebrowsing | — | status: negative | |
| 2026-10-12 06:46:05 | reputation | context | mock:urlhaus | — | status: unknown | |
| 2026-10-12 06:46:05 | reputation | context | mock:virustotal | — | status: unknown | |
| 2026-10-12 06:46:05 | whois | context | mock:rdap | — | status: positive | |
| 2026-10-12 06:46:05 | favicon | context | mock:playwright | 8c5699b43adb8a9c | mmh3: -810764581 phash: 99cc6533936ccc93 | artifact |
| 2026-10-12 06:46:05 | screenshot · datacenter view | context | mock:playwright | 9bb7d56280e38f15 | phash: c913965e4de34a1e dhash: c034638333318861 palette: ['#f4f8f7', '#edf3f2', '#fc… | artifact |
| 2026-10-12 06:46:05 | html · datacenter view | primary | mock:playwright | 0321bfcd813d9c44 | title: ShopNova Outlet — Checkout forms: 1 parked: False | artifact |
| 2026-10-12 06:46:05 | http | supporting | mock:playwright | 0321bfcd813d9c44 | status: 200 final_url: https://shopnova-outlet-sto… content_type: text/html; charset=utf-8 | |
| 2026-10-12 06:46:05 | dns | supporting | mock:local_dns | — | status: positive | |
| 2026-10-12 06:41:57 | http · referer view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: referer status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:41:57 | http · param view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: param status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:41:57 | http · bot view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: bot status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:41:57 | reputation | contradicting | mock:safebrowsing | — | status: negative | |
| 2026-10-12 06:41:57 | reputation | context | mock:urlhaus | — | status: unknown | |
| 2026-10-12 06:41:57 | reputation | context | mock:virustotal | — | status: unknown | |
| 2026-10-12 06:41:57 | whois | context | mock:rdap | — | status: positive | |
| 2026-10-12 06:41:57 | favicon | context | mock:playwright | 8c5699b43adb8a9c | mmh3: -810764581 phash: 99cc6533936ccc93 | artifact |
| 2026-10-12 06:41:57 | screenshot · datacenter view | context | mock:playwright | 9bb7d56280e38f15 | phash: c913965e4de34a1e dhash: c034638333318861 palette: ['#f4f8f7', '#edf3f2', '#fc… | artifact |
| 2026-10-12 06:41:57 | html · datacenter view | primary | mock:playwright | 0321bfcd813d9c44 | title: ShopNova Outlet — Checkout forms: 1 parked: False | artifact |
| 2026-10-12 06:41:57 | http | supporting | mock:playwright | 0321bfcd813d9c44 | status: 200 final_url: https://shopnova-outlet-sto… content_type: text/html; charset=utf-8 | |
| 2026-10-12 06:41:57 | dns | supporting | mock:local_dns | — | status: positive | |
| 2026-10-12 06:41:52 | http · referer view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: referer status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:41:52 | http · param view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: param status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:41:52 | http · bot view | supporting | mock:playwright | 0321bfcd813d9c44 | probe: bot status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3 | |
| 2026-10-12 06:41:52 | reputation | contradicting | mock:safebrowsing | — | status: negative | |
| 2026-10-12 06:41:52 | reputation | context | mock:urlhaus | — | status: unknown | |
| 2026-10-12 06:41:52 | reputation | context | mock:virustotal | — | status: unknown | |
| 2026-10-12 06:41:52 | whois | context | mock:rdap | — | status: positive | |
| 2026-10-12 06:41:52 | favicon | context | mock:playwright | 8c5699b43adb8a9c | mmh3: -810764581 phash: 99cc6533936ccc93 | artifact |
| 2026-10-12 06:41:52 | screenshot · datacenter view | context | mock:playwright | 9bb7d56280e38f15 | phash: c913965e4de34a1e dhash: c034638333318861 palette: ['#f4f8f7', '#edf3f2', '#fc… | artifact |
| 2026-10-12 06:41:52 | html · datacenter view | primary | mock:playwright | 0321bfcd813d9c44 | title: ShopNova Outlet — Checkout forms: 1 parked: False | artifact |
| 2026-10-12 06:41:52 | http | supporting | mock:playwright | 0321bfcd813d9c44 | status: 200 final_url: https://shopnova-outlet-sto… content_type: text/html; charset=utf-8 | |
| 2026-10-12 06:41:52 | dns | supporting | mock:local_dns | — | status: positive |