9 open38 to send
32
risk ?
medium suspicious shop confirmed · suspicious brand ShopNova

shopnova-outlet-store.com

A .com shop selling ShopNova products. It has no privacy policy, terms or returns page and it names no company at all. Google knows nothing about the business outside the shop itself.

found by Certificate logs, Analyst URL scan confidence ?65% domain name · https://shopnova-outlet-store.com/ hosted BR203.0.113.121 registrar Mock Registrar LLC
THREAT INTEL · what public blocklists say about this site — each card opens the lookup
Not on public blocklists yet — they lag by hours or days. BrandWatch found it first; unknown is never treated as safe.

What do I do · get it taken down

✓ Confirmed · Suspicious shop ·
by admin
change the conclusion
— the takedown subject follows; a drafted letter can be rewritten on the takedown page
Attack infrastructure: mapped → open the map
domain timeline evidence packages:json · html ·

Notes · for you and the next analyst — kept with the finding, never edited, also in Activity

No notes yet.

Conclusion · how sure are we that it sells fakes? — every letter and report claims only this

1 · Suspicious shopsigns that justify a closer look — not proof that the goods are fake the analyst’s conclusion
2 · Likely counterfeit sellerindependent evidence about the goods and about the seller point to counterfeits
3 · Confirmed counterfeitdirect proof: a test purchase, the brand's inspection of the product, or a platform's confirmation

BrandWatch reads “Suspicious shop” because: the seller is anonymous — no company details, or nothing about it on Google.

What would move it up:

  • evidence about the goods: a price at half the official one or less, or reviews that say the goods are fake
  • for “Confirmed counterfeit”: a test purchase, the brand's inspection of the product, or a platform's confirmation

Concluded by admin · 2026-10-14 09:52

Shop checks · is this a real seller of ShopNova products? · separate from the phishing score (shop-v2-d92668ce)

✓
About ShopNova
the page names “shopnova”
–
Company number
no company number on the page — not checked is never “valid”
✕
No privacy, terms or returns page
a real shop links them from every page
–
Contact e-mail
none on the page
✕
No company details
no company name or registration number on the page
–
Price vs official
no price in ILS found on the page
✕
No footprint on Google
Google finds nothing about “shopnova-outlet-store.com” outside the shop itself

AI: is this shop legitimate? · advisory, never part of the score

LIKELY SCAM
80% · mock:openai · likely sells replicas
  • no privacy policy, terms or returns page linked from the shop's page
  • no company name or registration number anywhere on the page
  • Google finds nothing about “shopnova-outlet-store.com” outside the shop itself

reviews mention fake or replica products

Where it was found

Country IL · page language he

Explain Finding — why it was flagged · every signal, its points and the evidence behind it

SignalGroupPointsEvidence
no privacy / terms / returns
shop_no_policy_pages
Contact & policies+12no privacy policy, terms or returns page linked from the shop's page
no company details
shop_no_company_details
Seller+10no company name or registration number anywhere on the page
no footprint on Google
shop_no_web_presence
Seller+10Google finds nothing about “shopnova-outlet-store.com” outside the shop itself

How the score adds up

⚙ deterministic · versioned Raw 32 of 100 → normalised to 32 / 100. Thresholds: Medium 25 · High 50 · Critical 75 · scoring shop-v2-d92668ce
open the arithmetic ↗ — this site's section of the scan trace

Group caps ? · stop correlated evidence from double counting

Contact & policies
12 / 15
Seller
20 / 25

Confidence ? · 65%

Breadth (2 independent groups)+50
Hard confirmers +0
Evidence completeness+15
Provider agreement+0
Unavailable evidence 0
Single weak signal0

Suspect vs. official similarity 50%

shopnova-outlet-store.com
suspect
the real ShopNova ?
official

Cloaking multi-probe ? ⚙ Tier 3/4 multi-probe

ProbeProfileLogin formDivergedNote
botbotyes same
paramdatacenteryes same
refererrefereryes same

Fetched several ways — a crawler user-agent, a victim-style link (?email=), a Google referer, a phone (when chosen in Settings → Proxy) and a real home or phone-network IP (Tier 4). Residential (Tier 4): not_needed. Residential IPs are used to look, never to interact.

0

VirusTotal · security vendors

0 of 90 engines flag this domain
malicious 0 · suspicious 0 · community reputation 0

Server reputation · AbuseIPDB

BR203.0.113.121 0/ 1000 report(s)
25 or more = several defenders reported abuse from this server.

Categories

uncategorized Mock Category Service

JARM

6aeb63fd80a4301b5439ac1558bc2e3e8b06231bf097d30353339233990221

Engines flagged first

EngineCategoryResultMethod
BitDefenderharmlesscleanblacklist
CRDFharmlesscleanblacklist
ESETharmlesscleanblacklist
Fortinetharmlesscleanblacklist
Google Safebrowsingharmlesscleanblacklist
Kasperskyharmlesscleanblacklist
Netcraftharmlesscleanblacklist
OpenPhishharmlesscleanblacklist
Phishtankharmlesscleanblacklist
Qutteraharmlesscleanblacklist
Sophosharmlesscleanblacklist
Webrootharmlesscleanblacklist

Look it up elsewhere

Each link opens the external service's own page for this site — nothing is sent from here beyond the name in the URL.

Registration data (RDAP)

Name
shopnova-outlet-store.com
registration
2024-04-27
Status
—
DNSSEC
—

Registrar & abuse contact

Registrar
Mock Registrar LLC
Abuse email
—
registrant org
REDACTED FOR PRIVACY

Nameservers

—
Current WHOIS record (VirusTotal)
Domain Name: SHOPNOVA-OUTLET-STORE.COM Registrar: Mock Registrar LLC Registrar Abuse Contact Email: abuse@mock-registrar.example Creation Date: 2024-04-27T00:00:00Z Name Server: NS1.MOCK-DNS.EXAMPLE Registrant Country: US

WHOIS history · every WHOIS snapshot WhoisXML has recorded for shopnova-outlet-store.com

Who registered the domain, when, through which registrar, and every change since: transfers, new owners, re-registration after expiry, privacy switched on or off. Phishers often register with their real details and hide them a day later — that first snapshot is a lead.

First registered

2024-04-27
Mock Registrar LLC

Snapshots

1
2024-04-28 → 2024-04-28

Owners seen

0 visible
0 owner change(s)

Registrars

1
0 transfer(s) · Mock Registrar LLC

Owner details now

Hidden
privacy since registration

TIMELINE

  • 2024-04-27
    Registered with privacy on
    registrant shown as 'REDACTED FOR PRIVACY' · via Mock Registrar LLC · first WHOIS snapshot 2024-04-28

SNAPSHOTS · CHANGED FIELDS MARKED

SeenRegistrarRegistrantCreated · expires
2024-04-28 Mock Registrar LLC hidden · REDACTED FOR PRIVACY 2024-04-27 · 2027-04-27
raw WHOIS · 2024-04-28
Domain Name: SHOPNOVA-OUTLET-STORE.COM Registrar: Mock Registrar LLC Creation Date: 2024-04-27T00:00:00Z Updated Date: 2024-04-28T00:00:00Z Registry Expiry Date: 2027-04-27T00:00:00Z Registrant Organization: REDACTED FOR PRIVACY Registrant Name: Registrant Email: Name Server: NS1.MOCK-DNS.EXAMPLE Name Server: NS2.MOCK-DNS.EXAMPLE

Source: WhoisXML WHOIS History API (whois-history.whoisxmlapi.com) · cached 24 h · fetched .

DNS records source: VirusTotal

A records are the servers hosting the site — click one to see everything else hosted there. NS tells you who runs its DNS (Cloudflare nameservers hide the real origin).

TypeTTLValue
A300 203.0.113.121
AAAA300 2001:db8::8281
NS21600 ns1.mock-dns.example
NS21600 ns2.mock-dns.example
MX3600 mail.shopnova-outlet-store.com prio 10
SOA1800 ns1.mock-dns.example rname hostmaster.shopnova-outlet-store.com · serial 2026100801

HTTPS certificate from VirusTotal

Common name
shopnova-outlet-store.com
Issuer
C=US O=Mock Trust Services CN=MT1
Valid
2026-09-20 00:00:00 → 2026-12-19 00:00:00
32% of the validity period elapsed
Alt names (2)
shopnova-outlet-store.com www.shopnova-outlet-store.com
SHA-256
b712a2651064238b73da770a9b7624d799e85bca2e12b077b035df0eb8328c91 · crt.sh ↗
serial, signature, key, TLS and the full certificate
Subject
CN=shopnova-outlet-store.com
Serial
62582029
Signature
sha256ECDSA
Public key
EC secp256r1
SHA-1
8045d035fadcc8847085bb37c77fc56d958bdf16
{ "cert_signature": { "signature_algorithm": "sha256ECDSA" }, "extensions": { "subject_alternative_name": [ "shopnova-outlet-store.com", "www.shopnova-outlet-store.com" ] }, "issuer": { "C": "US", "CN": "MT1", "O": "Mock Trust Services" }, "public_key": { "algorithm": "EC", "ec": { "oid": "secp256r1" } }, "serial_number": "62582029", "subject": { "CN": "shopnova-outlet-store.com" }, "thumbprint": "8045d035fadcc8847085bb37c77fc56d958bdf16", "thumbprint_sha256": "b712a2651064238b73da770a9b7624d799e85bca2e12b077b035df0eb8328c91", "validity": { "not_after": "2026-12-19 00:00:00", "not_before": "2026-09-20 00:00:00" }, "version": "V3" }
0

BR203.0.113.121

Brazil · Sao Paulo · AS64543 · Mock Hosting LLC · 203.0.113.0/24 · RIPE NCC
0 of 94 engines flag this IP · 6 sites hosted, 2 flagged · 0 communicating files

Abuse reports · AbuseIPDB — what other defenders reported about this server in the last 90 days

0/ 100
No reports in the last 90 days
Data Center/Web Hosting/Transit · Mock Hosting LLC
A score of 25 or more means several independent reporters saw abuse from this IP: phishing, scanning, spam or brute force. A fresh kit on a clean IP scores 0 — unknown, not clean.

SITES HOSTED ON THIS SERVER (passive DNS, each with its own detections)

Last resolvedDetectionsDomain
2026-10-135/ 95shopnova-deals.com VT ↗ · urlscan ↗
2026-10-075/ 95verify-account-3121.xyz VT ↗ · urlscan ↗
2026-10-090/ 90secure-login-3121.top VT ↗ · urlscan ↗
2026-10-110/ 90shopnova-outlet-store.com VT ↗ · urlscan ↗
2026-10-030/ 90support-desk-3121.site VT ↗ · urlscan ↗
2026-10-050/ 90wallet-sync-3121.online VT ↗ · urlscan ↗

COMMUNICATING FILES not fetched yet

IP WHOIS record
inetnum: 203.0.113.0 - 203.0.113.255 org-name: Mock Hosting LLC abuse-mailbox: abuse@mock.example
engine verdicts for this IP (12)
EngineCategoryResult
BitDefenderharmlessclean
CRDFharmlessclean
ESETharmlessclean
Fortinetharmlessclean
Google Safebrowsingharmlessclean
Kasperskyharmlessclean
Netcraftharmlessclean
OpenPhishharmlessclean
Phishtankharmlessclean
Qutteraharmlessclean
Sophosharmlessclean
Webrootharmlessclean

urlscan.io scan

not flagged by urlscan NLNetherlands 203.0.113.66AS64512 BulletproofHost BV server nginx 23 requests · 2 domains · 1 IPs · 1 countries scanned 2026-10-14 09:52
title: shopnova-outlet-store.com - Sign in
urlscan screenshot
domains contacted by the page (2)
shopnova-outlet-store.com · cdn.mock-static.example

Similar sites 30

Other pages urlscan has seen that share this site's page hash (same kit), its server, or the brand name.

Same page (identical document hash) 4hash:c783b70f09429f5d8138ea46e573e7d3c19c5aec92792797dcce88b98ba8c265

the same HTML served elsewhere — the same phishing kit

SeenVerdictDomainTitle
2026-09-16— NLshopn0va.com urlscan ↗ · VT ↗ shopn0va.com - Sign in
2026-09-15— NLshopnova-login.com urlscan ↗ · VT ↗ shopnova-login.com - Sign in
2026-09-14— NLsecure-shopnova.com urlscan ↗ · VT ↗ secure-shopnova.com - Sign in
2026-09-08— NLshopnova.co urlscan ↗ · VT ↗ shopnova.co - Sign in

Same server 0page.ip:203.0.113.66

other pages scanned on the same IP

none

Same brand name 26page.domain:*shopnova*

domains containing the brand name

SeenVerdictDomainTitle
2026-10-14— NLshopnova-partners.com urlscan ↗ · VT ↗ shopnova-partners.com - Sign in
2026-10-13— NLshopnova-blog.net urlscan ↗ · VT ↗ shopnova-blog.net - Sign in
2026-10-12— NLshopnovafans.com urlscan ↗ · VT ↗ shopnovafans.com - Sign in
2026-10-11— NLshopnova-reviews.com urlscan ↗ · VT ↗ shopnova-reviews.com - Sign in
2026-10-10— NLshopnova-careers.com urlscan ↗ · VT ↗ shopnova-careers.com - Sign in
2026-10-09— NLshopnova-deals.com urlscan ↗ · VT ↗ shopnova-deals.com - Sign in
2026-10-08— NLshopnova-status.com urlscan ↗ · VT ↗ shopnova-status.com - Sign in
2026-10-07— NLshopnova-community.org urlscan ↗ · VT ↗ shopnova-community.org - Sign in
2026-10-06— NLshopnova-press.com urlscan ↗ · VT ↗ shopnova-press.com - Sign in
2026-10-05— NLshopnova-events.com urlscan ↗ · VT ↗ shopnova-events.com - Sign in
2026-09-24— NLshopnova.com urlscan ↗ · VT ↗ shopnova.com - Sign in
2026-09-23— NLwww.shopnova.com urlscan ↗ · VT ↗ www.shopnova.com - Sign in
2026-09-22— NLshopnova.co.il urlscan ↗ · VT ↗ shopnova.co.il - Sign in
2026-09-13— NLshopnova-verify.com urlscan ↗ · VT ↗ shopnova-verify.com - Sign in
2026-09-10— NLshopnova-account.net urlscan ↗ · VT ↗ shopnova-account.net - Sign in
2026-09-09— NLshopnova-support-center.com urlscan ↗ · VT ↗ shopnova-support-center.com - Sign in
2026-09-06— NLshopnova-giftcard.com urlscan ↗ · VT ↗ shopnova-giftcard.com - Sign in
2026-09-05— NLshopnova-refund.net urlscan ↗ · VT ↗ shopnova-refund.net - Sign in
2026-09-04— NLshopnova-verification.com urlscan ↗ · VT ↗ shopnova-verification.com - Sign in
2026-09-03— NLshopnova--sneakers.com urlscan ↗ · VT ↗ shopnova--sneakers.com - Sign in
2026-09-02— NLshopnova-eu.com urlscan ↗ · VT ↗ shopnova-eu.com - Sign in
2026-09-01— NLshopnova-id-check.com urlscan ↗ · VT ↗ shopnova-id-check.com - Sign in
2026-08-20— NLshopnova-support.com urlscan ↗ · VT ↗ shopnova-support.com - Sign in
2026-08-19— NLshopnova-review.com urlscan ↗ · VT ↗ shopnova-review.com - Sign in
2026-08-18— NLshopnova-coupons.com urlscan ↗ · VT ↗ shopnova-coupons.com - Sign in

Passive DNS replication 1

Every IP this domain has resolved to, with how many engines flag that IP. Click an IP to see the other sites on it.

Date resolvedDetections (IP)IP
2026-09-273/ 92203.0.113.121

Subdomains 3

HostDetections
login.shopnova-outlet-store.com2/ 92
mail.shopnova-outlet-store.com0/ 90
www.shopnova-outlet-store.com0/ 90

Communicating files 0 not fetched yet

Malware samples that contacted this domain while being analysed.

Historical WHOIS · VirusTotal 1

2026-09-14 · Mock Registrar LLC
Registrant Organization
REDACTED FOR PRIVACY
Registrant Country
US
Name Server
NS1.MOCK-DNS.EXAMPLE

Historical certificates 0 VT · 2 CT not fetched yet

CERTIFICATE TRANSPARENCY (crt.sh / CertSpotter) — the registrable domain and its subdomains

Not beforeNamesIssuer
2026-09-30shopnova-outlet-store.com, www.shopnova-outlet-store.comC=US, O=Let's Encrypt, CN=R3
2026-09-01mail0.shopnova-outlet-store.com-cdn.netMock CA

Observation timeline

  • 2026-10-12 06:41:52 · HTTP 200 · state new · datacenter · content changed · 0321bfcd813d · screenshot
  • 2026-10-12 06:41:57 · HTTP 200 · state flagged · datacenter · 0321bfcd813d · screenshot
  • 2026-10-12 06:46:05 · HTTP 200 · state flagged · datacenter · 0321bfcd813d · screenshot
  • 2026-10-12 06:46:10 · HTTP 200 · state flagged · datacenter · 0321bfcd813d · screenshot

first seen 2026-10-12 06:41 · scans 4 · next 2026-10-12 12:46 · candidate state flagged · WHOIS history →

Score history

WhenScoreSeverityConfidenceVersion
2026-10-12 06:41:5232medium65%shop-v2-d92668ce
2026-10-12 06:41:5732medium65%shop-v2-d92668ce
2026-10-12 06:46:0532medium65%shop-v2-d92668ce
2026-10-12 06:46:10 current32medium65%shop-v2-d92668ce

Evidence · chain of custody ? ⚙ immutable · DB-enforced

Append-only by the database: UPDATE and DELETE are rejected by triggers, even for an admin. Every artifact is stored under its own SHA-256, so the hash is literally the file name — any tampering is visible. Role: primary = proves a signal · supporting = corroborates · contradicting = argues the site is legitimate · context = background.

Observed (UTC)TypeRoleSourceSHA-256Details
2026-10-12 06:46:10 http · referer view supporting mock:playwright 0321bfcd813d9c44 probe: referer status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:46:10 http · param view supporting mock:playwright 0321bfcd813d9c44 probe: param status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:46:10 http · bot view supporting mock:playwright 0321bfcd813d9c44 probe: bot status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:46:10 reputation contradicting mock:safebrowsing — status: negative
2026-10-12 06:46:10 reputation context mock:urlhaus — status: unknown
2026-10-12 06:46:10 reputation context mock:virustotal — status: unknown
2026-10-12 06:46:10 whois context mock:rdap — status: positive
2026-10-12 06:46:10 favicon context mock:playwright 8c5699b43adb8a9c mmh3: -810764581 phash: 99cc6533936ccc93 artifact
2026-10-12 06:46:10 screenshot · datacenter view context mock:playwright 9bb7d56280e38f15 phash: c913965e4de34a1e dhash: c034638333318861 palette: ['#f4f8f7', '#edf3f2', '#fc… artifact
2026-10-12 06:46:10 html · datacenter view primary mock:playwright 0321bfcd813d9c44 title: ShopNova Outlet — Checkout forms: 1 parked: False artifact
2026-10-12 06:46:10 http supporting mock:playwright 0321bfcd813d9c44 status: 200 final_url: https://shopnova-outlet-sto… content_type: text/html; charset=utf-8
2026-10-12 06:46:10 dns supporting mock:local_dns — status: positive
show all 48 evidence rows from 4 scan(s)
2026-10-12 06:46:05 http · referer view supporting mock:playwright 0321bfcd813d9c44 probe: referer status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:46:05 http · param view supporting mock:playwright 0321bfcd813d9c44 probe: param status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:46:05 http · bot view supporting mock:playwright 0321bfcd813d9c44 probe: bot status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:46:05 reputation contradicting mock:safebrowsing — status: negative
2026-10-12 06:46:05 reputation context mock:urlhaus — status: unknown
2026-10-12 06:46:05 reputation context mock:virustotal — status: unknown
2026-10-12 06:46:05 whois context mock:rdap — status: positive
2026-10-12 06:46:05 favicon context mock:playwright 8c5699b43adb8a9c mmh3: -810764581 phash: 99cc6533936ccc93 artifact
2026-10-12 06:46:05 screenshot · datacenter view context mock:playwright 9bb7d56280e38f15 phash: c913965e4de34a1e dhash: c034638333318861 palette: ['#f4f8f7', '#edf3f2', '#fc… artifact
2026-10-12 06:46:05 html · datacenter view primary mock:playwright 0321bfcd813d9c44 title: ShopNova Outlet — Checkout forms: 1 parked: False artifact
2026-10-12 06:46:05 http supporting mock:playwright 0321bfcd813d9c44 status: 200 final_url: https://shopnova-outlet-sto… content_type: text/html; charset=utf-8
2026-10-12 06:46:05 dns supporting mock:local_dns — status: positive
2026-10-12 06:41:57 http · referer view supporting mock:playwright 0321bfcd813d9c44 probe: referer status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:41:57 http · param view supporting mock:playwright 0321bfcd813d9c44 probe: param status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:41:57 http · bot view supporting mock:playwright 0321bfcd813d9c44 probe: bot status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:41:57 reputation contradicting mock:safebrowsing — status: negative
2026-10-12 06:41:57 reputation context mock:urlhaus — status: unknown
2026-10-12 06:41:57 reputation context mock:virustotal — status: unknown
2026-10-12 06:41:57 whois context mock:rdap — status: positive
2026-10-12 06:41:57 favicon context mock:playwright 8c5699b43adb8a9c mmh3: -810764581 phash: 99cc6533936ccc93 artifact
2026-10-12 06:41:57 screenshot · datacenter view context mock:playwright 9bb7d56280e38f15 phash: c913965e4de34a1e dhash: c034638333318861 palette: ['#f4f8f7', '#edf3f2', '#fc… artifact
2026-10-12 06:41:57 html · datacenter view primary mock:playwright 0321bfcd813d9c44 title: ShopNova Outlet — Checkout forms: 1 parked: False artifact
2026-10-12 06:41:57 http supporting mock:playwright 0321bfcd813d9c44 status: 200 final_url: https://shopnova-outlet-sto… content_type: text/html; charset=utf-8
2026-10-12 06:41:57 dns supporting mock:local_dns — status: positive
2026-10-12 06:41:52 http · referer view supporting mock:playwright 0321bfcd813d9c44 probe: referer status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:41:52 http · param view supporting mock:playwright 0321bfcd813d9c44 probe: param status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:41:52 http · bot view supporting mock:playwright 0321bfcd813d9c44 probe: bot status: 200 content_sha256: 0321bfcd813d9c44a024eb6663d… +3
2026-10-12 06:41:52 reputation contradicting mock:safebrowsing — status: negative
2026-10-12 06:41:52 reputation context mock:urlhaus — status: unknown
2026-10-12 06:41:52 reputation context mock:virustotal — status: unknown
2026-10-12 06:41:52 whois context mock:rdap — status: positive
2026-10-12 06:41:52 favicon context mock:playwright 8c5699b43adb8a9c mmh3: -810764581 phash: 99cc6533936ccc93 artifact
2026-10-12 06:41:52 screenshot · datacenter view context mock:playwright 9bb7d56280e38f15 phash: c913965e4de34a1e dhash: c034638333318861 palette: ['#f4f8f7', '#edf3f2', '#fc… artifact
2026-10-12 06:41:52 html · datacenter view primary mock:playwright 0321bfcd813d9c44 title: ShopNova Outlet — Checkout forms: 1 parked: False artifact
2026-10-12 06:41:52 http supporting mock:playwright 0321bfcd813d9c44 status: 200 final_url: https://shopnova-outlet-sto… content_type: text/html; charset=utf-8
2026-10-12 06:41:52 dns supporting mock:local_dns — status: positive