FINDINGS · 7 confirmed phishing
jk move · x select · c confirm · d dismiss · / search ·A finding is a look-alike that scored Medium or higher and waits for an analyst's verdict. Everything below the threshold stays on the Watchlist and is re-checked on a schedule.
| Screenshot | Severity | Host | Score | Conf. | Signals | State | Found | |
|---|---|---|---|---|---|---|---|---|
 |
critical | coinpilot-bot.io | 75 VT — | 90 |
forwards with an affiliate id identical favicon forwards through another host looks like the real site +8 more | confirmed phishing | ||
 |
critical | coin-pilot.io | 75 VT 7 | 100 |
forwards with an affiliate id identical favicon forwards through another host looks like the real site +9 more | confirmed phishing | ||
 |
critical | cooinpilot.io | 75 VT — | 100 |
forwards with an affiliate id identical favicon forwards through another host looks like the real site +8 more | confirmed phishing | ||
 |
critical | koinpilot.io | 75 VT — | 100 |
forwards with an affiliate id identical favicon forwards through another host looks like the real site +8 more | confirmed phishing | ||
 |
critical | coinplot.io | 75 VT 7 | 100 |
forwards with an affiliate id identical favicon forwards through another host looks like the real site +9 more | confirmed phishing | ||
 |
critical | coinpllot.io | 75 VT — | 100 |
forwards with an affiliate id identical favicon forwards through another host looks like the real site +8 more | confirmed phishing | ||
 |
critical | coinpilott.io | 75 VT — | 100 |
forwards with an affiliate id identical favicon forwards through another host looks like the real site +9 more | confirmed phishing |
7 in total
Statistics · across open findings of the chosen brand
show ▾hide ▴
Open by severity · Medium ≥ 25 · High ≥ 50 · Critical ≥ 75
no open findings
Why things are flagged · signals fired per group across open findings
Risk score distribution
0
10
20
30
40
50
60
770
80
90
New findings · 14 days
14 days agotoday · 0
Surface · where the brand appears: domain name · subdomain · URL path
■ domain name 7
Top fired signals
forwards with an affiliate id
7
forwards through another host
7
identical favicon
7
looks like the real site
7
same colours
7
cloned login form
7
asks for a password
7
brand words in the text
7
shares a server with phishing
7
shares a certificate with phishing
7
Every signal belongs to one of 7 groups, and each group has a points cap so correlated evidence is not counted twice. Hover a signal for its evidence and points. How scoring works →
Keyboard shortcuts
| j / k | next / previous finding |
| Enter | open the highlighted finding |
| x | select / unselect it |
| c | confirm the selected (or highlighted) findings as phishing |
| d | dismiss them — the bar asks for the reason |
| / | search by host |
| s | show / hide the statistics |
| ? | this sheet · Esc closes it |