9 open38 to send

FINDINGS · 8 open

jk move · x select · c confirm · d dismiss · / search ·

A finding is a look-alike that scored Medium or higher and waits for an analyst's verdict. Everything below the threshold stays on the Watchlist and is re-checked on a schedule.

0awaiting verdict 0critical 0high 0medium 0new in 24h 0confirmed 0dismissed
ScreenshotSeverityHostScoreConf.SignalsStateFound
no screenshot (the page did not load)
critical
AI answer
shopnova-login.com
content · found by AI answer (ChatGPT / Gemini / Google AI Mode) · answers · timeline
100
70
a known phishing site sends users elsewhere published by a look-alike awaiting verdict
no screenshot (the page did not load)
critical
AI answer
03-9817777
content · found by AI answer (ChatGPT / Gemini / Google AI Mode) · answers · timeline
100
85
not on the brand's site a known phishing site published by a look-alike published off the brand's site awaiting verdict
no screenshot (the page did not load)
critical
social
facebook.com/shopnova.support.help
content · found by Facebook pages / Instagram profiles · account · timeline
100
85
AI: impersonation claims to be the brand uses the brand's logo links off the brand +5 more awaiting verdict
no screenshot (the page did not load)
critical
social
facebook.com/shopnova.support.help
content · found by Facebook pages / Instagram profiles · account · timeline
100
85
AI: impersonation claims to be the brand uses the brand's logo links off the brand +5 more awaiting verdict
screenshot of shopnova-refund.net critical
CLOAKED KIT
shopnova-refund.net
URL path · found by Facebook pages / Instagram profiles · network · timeline
89 VT —
100
identical favicon looks like the real site shares a server with phishing linked to a mapped attacker +11 more awaiting verdict
no screenshot (the page did not load)
critical
social
instagram.com/shopnova.israel.official
content · found by Facebook pages / Instagram profiles · account · timeline
86
80
AI: impersonation claims to be the brand uses the brand's logo links off the brand +1 more awaiting verdict
screenshot of shopnova-eu.com critical
CLOAKED KIT
shopnova-eu.com
domain name · found by Certificate logs · network · timeline
75 VT clean
92
identical favicon looks like the real site asks for a password brand name in the domain +10 more awaiting verdict
no screenshot (the page did not load)
high
AI answer
help@shopnova-care.net
content · found by AI answer (ChatGPT / Gemini / Google AI Mode) · answers · timeline
70
75
not on the brand's site the cited page does not say it the AI took it back awaiting verdict
8 in total
Download these 8: CSV · JSON (the same filters, every page)

Statistics · across open findings of the chosen brand

show ▾hide ▴

Open by severity · Medium ≥ 25 · High ≥ 50 · Critical ≥ 75

critical7
high1

Why things are flagged · signals fired per group across open findings

Behaviour
88
Visual
70
Identity
47
Infrastructure
35
Freshness
35
Seller
17
Reputation
14
Contact & policies
12
Offer
10
Evasion
5
AI reading
4
Brand use
2
Proof
2

Risk score distribution

0 10 420 130 40 450 260 770 1380 590

New findings · 14 days

14 days agotoday · 0

Surface · where the brand appears: domain name · subdomain · URL path

■ domain name 25  ■ content 7  ■ URL path 4  

Top fired signals

page title claims the brand
21
brand words in the text
21
brand name in the domain
18
brand + extra word
17
urgent lure wording
17
registered < 30 days ago
17
identical favicon
17
cloned login form
16
asks for a password
16
looks like the real site
15

Every signal belongs to one of 7 groups, and each group has a points cap so correlated evidence is not counted twice. Hover a signal for its evidence and points. How scoring works →