9 open38 to send

FINDINGS · 8 match

jk move · x select · c confirm · d dismiss · / search ·

A finding is a look-alike that scored Medium or higher and waits for an analyst's verdict. Everything below the threshold stays on the Watchlist and is re-checked on a schedule.

0awaiting verdict 0critical 0high 0medium 0new in 24h 0confirmed 0dismissed
All brands 8 ShopNova 7ShopNova · Israel 2CoinPilot 0VaultPay 1
Reset
ScreenshotSeverityHostScoreConf.SignalsStateFound
no screenshot (the page did not load)
 critical
AI answer
 shopnova-login.com ShopNova
content · found by AI answer (ChatGPT / Gemini / Google AI Mode) · answers · timeline
 100
70
 a known phishing site sends users elsewhere published by a look-alike awaiting verdict
no screenshot (the page did not load)
 critical
AI answer
 03-9817777 ShopNova
content · found by AI answer (ChatGPT / Gemini / Google AI Mode) · answers · timeline
 100
85
 not on the brand's site a known phishing site published by a look-alike published off the brand's site awaiting verdict
no screenshot (the page did not load)
 critical
social
 facebook.com/shopnova.support.help ShopNova · Israel
content · found by Facebook pages / Instagram profiles · account · timeline
 100
85
 AI: impersonation claims to be the brand uses the brand's logo links off the brand +5 more awaiting verdict
no screenshot (the page did not load)
 critical
social
 facebook.com/shopnova.support.help ShopNova
content · found by Facebook pages / Instagram profiles · account · timeline
 100
85
 AI: impersonation claims to be the brand uses the brand's logo links off the brand +5 more awaiting verdict
screenshot of shopnova-refund.net critical
CLOAKED KIT
 shopnova-refund.net ShopNova
URL path · found by Facebook pages / Instagram profiles · network · timeline
 89 VT —
100
 identical favicon looks like the real site shares a server with phishing linked to a mapped attacker +11 more awaiting verdict
no screenshot (the page did not load)
 critical
social
 instagram.com/shopnova.israel.official ShopNova
content · found by Facebook pages / Instagram profiles · account · timeline
 86
80
 AI: impersonation claims to be the brand uses the brand's logo links off the brand +1 more awaiting verdict
screenshot of account-review-center.com critical account-review-center.com VaultPay
domain name · found by Facebook / Instagram ads · network · timeline
 75 VT —
100
 identical favicon looks like the real site linked to a mapped attacker same tracking ID as phishing +10 more awaiting verdict
screenshot of shopnova-eu.com critical
CLOAKED KIT
 shopnova-eu.com ShopNova · Israel
domain name · found by Certificate logs · network · timeline
 75 VT clean
92
 identical favicon looks like the real site asks for a password brand name in the domain +10 more awaiting verdict
8 in total
Download these 8: CSV · JSON (the same filters, every page)

Statistics · across open findings

show ▾hide ▴

Open by severity · Medium ≥ 25 · High ≥ 50 · Critical ≥ 75

critical8
high1

Why things are flagged · signals fired per group across open findings

Behaviour
134
Visual
123
Infrastructure
78
Identity
63
Freshness
37
Reputation
19
Seller
17
Contact & policies
12
Offer
10
Evasion
5
AI reading
4
Brand use
2
Proof
2

Risk score distribution

0 10 420 130 40 450 260 1870 1480 590

New findings · 14 days

14 days agotoday · 0

Surface · where the brand appears: domain name · subdomain · URL path

■ domain name 37  ■ content 7  ■ URL path 4  

Top fired signals

brand words in the text
33
identical favicon
29
cloned login form
28
asks for a password
28
looks like the real site
27
same colours
27
page title claims the brand
26
brand name in the domain
23
brand + extra word
22
urgent lure wording
22

Every signal belongs to one of 7 groups, and each group has a points cap so correlated evidence is not counted twice. Hover a signal for its evidence and points. How scoring works →