9 open38 to send

FINDINGS · 1 match

jk move · x select · c confirm · d dismiss · / search ·

A finding is a look-alike that scored Medium or higher and waits for an analyst's verdict. Everything below the threshold stays on the Watchlist and is re-checked on a schedule.

0awaiting verdict 0critical 0high 0medium 0new in 24h 0confirmed 0dismissed
All brands 9 ShopNova 8ShopNova · Israel 2CoinPilot 0VaultPay 1
Reset
ScreenshotSeverityHostScoreConf.SignalsStateFound
screenshot of account-review-center.com critical account-review-center.com VaultPay
domain name · found by Facebook / Instagram ads · network · timeline
 75 VT —
100
 identical favicon looks like the real site linked to a mapped attacker same tracking ID as phishing +10 more awaiting verdict
1 in total
Download these 1: CSV · JSON (the same filters, every page)

Statistics · across open findings

show ▾hide ▴

Open by severity · Medium ≥ 25 · High ≥ 50 · Critical ≥ 75

critical8
high1

Why things are flagged · signals fired per group across open findings

Behaviour
134
Visual
123
Infrastructure
78
Identity
63
Freshness
37
Reputation
19
Seller
17
Contact & policies
12
Offer
10
Evasion
5
AI reading
4
Brand use
2
Proof
2

Risk score distribution

0 10 420 130 40 450 260 1870 1480 590

New findings · 14 days

14 days agotoday · 0

Surface · where the brand appears: domain name · subdomain · URL path

■ domain name 37  ■ content 7  ■ URL path 4  

Top fired signals

brand words in the text
33
identical favicon
29
cloned login form
28
asks for a password
28
looks like the real site
27
same colours
27
page title claims the brand
26
brand name in the domain
23
brand + extra word
22
urgent lure wording
22

Every signal belongs to one of 7 groups, and each group has a points cap so correlated evidence is not counted twice. Hover a signal for its evidence and points. How scoring works →