risk ?

high likely counterfeit seller confirmed · likely fake brand ShopNova

stylehub-israel.com

A .com shop in Hebrew advertising ShopNova products on Facebook / Instagram (page “StyleHub.Israel”) at 350 ILS per item — 44% of the official 799 ILS. Its only e-mail is Gmail (stylehubisrael@gmail.com). Google knows nothing about the business outside the shop itself.

found by Facebook / Instagram ads confidence ?90% URL path · https://stylehub-israel.com/product-category/shopnova/ hosted

198.51.100.50 registrar Mock Registrar LLC

THREAT INTEL · what public blocklists say about this site — each card opens the lookup

VirusTotal↗

not in VirusTotal yet (unknown ≠ clean)

Google Safe Browsing↗

not on Google's list yet — browsers do not warn

Not on public blocklists yet — they lag by hours or days. BrandWatch found it first; unknown is never treated as safe.

What do I do · get it taken down

✓ Confirmed · Likely counterfeit seller · 2026-10-14 09:52

by admin

change the conclusion

Attack infrastructure: mapped → open the map

domain timeline evidence packages:json · 2026-10-14 09:52 html · 2026-10-14 09:52

Notes · for you and the next analyst — kept with the finding, never edited, also in Activity

No notes yet.

Conclusion · how sure are we that it sells fakes? — every letter and report claims only this

1 · Suspicious shopsigns that justify a closer look — not proof that the goods are fake

2 · Likely counterfeit sellerindependent evidence about the goods and about the seller point to counterfeits the analyst’s conclusion

3 · Confirmed counterfeitdirect proof: a test purchase, the brand's inspection of the product, or a platform's confirmation

BrandWatch reads “Likely counterfeit seller” because: the price is half the official price or less · one bundle price across many premium brands · the seller is anonymous — no company details, or nothing about it on Google.

What would move it up:

for “Confirmed counterfeit”: a test purchase, the brand's inspection of the product, or a platform's confirmation

Concluded by admin · 2026-10-14 09:52

Shop checks · is this a real seller of ShopNova products? · separate from the phishing score (shop-v2-d92668ce)

✓

About ShopNova

the page names “shopnova”

–

Company number

215539636 is a sole trader's number (עוסק — a personal ID): the Registrar of Companies lists companies only, so there is nothing to look up — not checked is never “valid”

✓

Policy pages linked

about, privacy, terms

Free-mail contact only

stylehubisrael@gmail.com

WhatsApp / phone only

no e-mail on the shop’s own domain

✓

Company details on the page

Style Hub 215539636

Half the official price or less

350 ILS per item (⁨מידה תוך 14 יום 🔃 + 2 זוגות נעליים ב־699₪ + משלוח ⁩) — 44% of the official 799 ILS (ShopNova Runner)

Multi-buy offer

multi-buy offer: “⁨מידה תוך 14 יום 🔃 + 2 זוגות נעליים ב־699₪ + משלוח ח⁩”

✓

Old domain

the domain is 3 years old

Local language, generic domain

a .com site written in he — a local shop without the country's domain ending

No footprint on Google

Google finds nothing about “Style Hub” outside the shop itself

AI: is this shop legitimate? · advisory, never part of the score

LIKELY SCAM

95% · mock:openai · likely sells replicas

the only contact e-mail is a free mailbox (stylehubisrael@gmail.com)
contact is WhatsApp / phone only — no e-mail on the shop's own domain
multi-buy offer: “⁨מידה תוך 14 יום 🔃 + 2 זוגות נעליים ב־699₪ + משלוח ח⁩”
a .com site written in he — a local shop without the country's domain ending
350 ILS per item (⁨מידה תוך 14 יום 🔃 + 2 זוגות נעליים ב־699₪ + משלוח ⁩) — 44% of the official 799 ILS (ShopNova Runner)
one multi-buy price (“⁨מידה תוך 14 יום 🔃 + 2 זוגות נעליים ב־699₪ + משלוח ⁩”) on a shop that also sells 8 other premium brands (New Balance, Asics, Saucony, Converse, Ugg, Golden Goose…) — a genuine re

reviews mention fake or replica products

Where it was found

Country IL · page language he · built on Woocommerce

1 Meta ad(s) send buyers here — see Report to Meta below.

Report to Meta · the ads and the pages that send buyers to this shop

Meta's own “Report ad” and “Report Page” flows work for anyone with a Facebook account. BrandWatch prepares the links and the text; a person files the report. Draft a takedown to keep track of what was reported.

StyleHub.Israel 1 adalso on Instagram

Open the page ↗

Report the page: open it → “…” → Report Page → Scam / fraud or Pretending to be a business.

“המבצע שחזרתם לשאול עליו 👀 2 זוגות ShopNova Runner ב־699₪ — בוחרים 2 זוגות ואנחנו דואגים לשאר 👟 משלוח חינם”

IL · running since 2026-10-01 · facebook, instagram · ad 3239326333285059

Report this ad ↗

Report an ad: open it in the Ad Library → “…” → Report ad → Scam or fraud (or Intellectual property → Counterfeit, if you hold the trademark).

Text to paste into the report

This ad / page sends buyers to https://stylehub-israel.com/product-category/shopnova/, a shop that is likely selling counterfeit ShopNova products. It is not an authorised ShopNova retailer.
A .com shop in Hebrew advertising ShopNova products on Facebook / Instagram (page “StyleHub.Israel”) at 350 ILS per item — 44% of the official 799 ILS. Its only e-mail is Gmail (stylehubisrael@gmail.com). Google knows nothing about the business outside the shop itself.
Ad: https://www.facebook.com/ads/library/?id=3239326333285059 — page “StyleHub.Israel”

FOR THE TRADEMARK OWNER

Facebook — Trademark report form ↗for the trademark owner; has a dedicated option for content offering counterfeit goods

Instagram / Threads — Counterfeit report form ↗selling or promoting counterfeit goods on Instagram or Threads

Instagram — Trademark report form ↗use of the brand name or logo on Instagram without permission

Explain Finding — why it was flagged · every signal, its points and the evidence behind it

Signal	Group	Points	Evidence
half the official price or less shop_price_far_below_official	Offer	+20	350 ILS per item (⁨מידה תוך 14 יום 🔃 + 2 זוגות נעליים ב־699₪ + משלוח ⁩) — 44% of the official 799 ILS (ShopNova Runner)
Gmail-type contact only shop_free_email_only	Contact & policies	+12	the only contact e-mail is a free mailbox (stylehubisrael@gmail.com)
one price, many premium brands shop_multibrand_bundle	Brand use	+12	one multi-buy price (“⁨מידה תוך 14 יום 🔃 + 2 זוגות נעליים ב־699₪ + משלוח ⁩”) on a shop that also sells 8 other premium brands (New Balance, Asics, Saucony, Converse, Ugg, Golden Goose…) — a genuine retailer cannot sell them all at one bundle price
no footprint on Google shop_no_web_presence	Seller	+10	Google finds nothing about “Style Hub” outside the shop itself
WhatsApp / phone only shop_chat_or_phone_only	Contact & policies	+6	contact is WhatsApp / phone only — no e-mail on the shop's own domain
multi-buy offer shop_multibuy_bait	Offer	+6	multi-buy offer: “⁨מידה תוך 14 יום 🔃 + 2 זוגות נעליים ב־699₪ + משלוח ח⁩”
local language, generic domain shop_tld_language_mismatch	Seller	+6	a .com site written in he — a local shop without the country's domain ending

show all 7 signals and false-positive checks

the shop's domain is more than three years old

shop_established_domain

false-positive check

-8

lowers the score: a sign the site may be legitimate

How the score adds up

⚙ deterministic · versioned Raw 57 of 100 → normalised to 57 / 100. Thresholds: Medium 25 · High 50 · Critical 75 · scoring shop-v2-d92668ce
open the arithmetic ↗ — this site's section of the scan trace

Group caps ? · stop correlated evidence from double counting

Contact & policies

18 → 15

Offer

26 → 22

Seller

16 / 25

Brand use

12 / 15

Confidence ? · 90%

Breadth (4 independent groups)	+70
Hard confirmers	+0
Evidence completeness	+20
Provider agreement	+0
Unavailable evidence	0
Single weak signal	0

Suspect vs. official similarity 50%

stylehub-israel.com

the real ShopNova ?

VirusTotal · security vendors

0 of 90 engines flag this domain

malicious 0 · suspicious 0 · community reputation 0

Server reputation · AbuseIPDB

198.51.100.50 0/ 1000 report(s)

25 or more = several defenders reported abuse from this server.

JARM

0d39c6c1b6626b5f7d006c9b8a15932e8573e392c6d463923617e41d209172

Engines flagged first

Engine	Category	Result	Method
BitDefender	harmless	clean	blacklist
CRDF	harmless	clean	blacklist
ESET	harmless	clean	blacklist
Fortinet	harmless	clean	blacklist
Google Safebrowsing	harmless	clean	blacklist
Kaspersky	harmless	clean	blacklist
Netcraft	harmless	clean	blacklist
OpenPhish	harmless	clean	blacklist
Phishtank	harmless	clean	blacklist
Quttera	harmless	clean	blacklist
Sophos	harmless	clean	blacklist
Webroot	harmless	clean	blacklist

Look it up elsewhere

Each link opens the external service's own page for this site — nothing is sent from here beyond the name in the URL.

VirusTotal domain ↗VirusTotal relations ↗urlscan search ↗URLhaus ↗crt.sh ↗Google Safe Browsing ↗Wayback Machine ↗Censys ↗VirusTotal URL ↗VirusTotal IP ↗Shodan ↗AbuseIPDB ↗Censys host ↗

Jump to Registration WHOIS history DNS records Certificate

Registration data (RDAP)

Name: stylehub-israel.com
registration: 2023-09-12
Status: —
DNSSEC: —

Registrar & abuse contact

Registrar: Mock Registrar LLC
Abuse email: —
registrant org: REDACTED FOR PRIVACY

Nameservers

—

Current WHOIS record (VirusTotal)

Domain Name: STYLEHUB-ISRAEL.COM Registrar: Mock Registrar LLC Registrar Abuse Contact Email: abuse@mock-registrar.example Creation Date: 2023-09-12T00:00:00Z Name Server: NS1.MOCK-DNS.EXAMPLE Registrant Country: US

WHOIS history · every WHOIS snapshot WhoisXML has recorded for stylehub-israel.com

Who registered the domain, when, through which registrar, and every change since: transfers, new owners, re-registration after expiry, privacy switched on or off. Phishers often register with their real details and hide them a day later — that first snapshot is a lead.

First registered

2023-09-12

Mock Registrar LLC

Snapshots

2023-09-13 → 2023-09-13

Owners seen

0 visible

0 owner change(s)

Registrars

0 transfer(s) · Mock Registrar LLC

Owner details now

Hidden

privacy since registration

TIMELINE

2023-09-12
Registered with privacy on
registrant shown as 'REDACTED FOR PRIVACY' · via Mock Registrar LLC · first WHOIS snapshot 2023-09-13

SNAPSHOTS · CHANGED FIELDS MARKED

Seen	Registrar	Registrant	Created · expires
2023-09-13	Mock Registrar LLC	hidden · REDACTED FOR PRIVACY	2023-09-12 · 2027-09-11
raw WHOIS · 2023-09-13 Domain Name: STYLEHUB-ISRAEL.COM Registrar: Mock Registrar LLC Creation Date: 2023-09-12T00:00:00Z Updated Date: 2023-09-13T00:00:00Z Registry Expiry Date: 2027-09-11T00:00:00Z Registrant Organization: REDACTED FOR PRIVACY Registrant Name: Registrant Email: Name Server: NS1.MOCK-DNS.EXAMPLE Name Server: NS2.MOCK-DNS.EXAMPLE

Source: WhoisXML WHOIS History API (whois-history.whoisxmlapi.com) · cached 24 h · fetched .

DNS records source: VirusTotal

A records are the servers hosting the site — click one to see everything else hosted there. NS tells you who runs its DNS (Cloudflare nameservers hide the real origin).

Type	TTL	Value
A	300	198.51.100.50
AAAA	300	2001:db8::ad00
NS	21600	ns1.mock-dns.example
NS	21600	ns2.mock-dns.example
MX	3600	mail.stylehub-israel.com prio 10
SOA	1800	ns1.mock-dns.example rname hostmaster.stylehub-israel.com · serial 2026100801

HTTPS certificate from VirusTotal

Common name: stylehub-israel.com
Issuer: C=US O=Mock Trust Services CN=MT1
Valid: 2026-09-20 00:00:00 → 2026-12-19 00:00:00
32% of the validity period elapsed
Alt names (2): stylehub-israel.com www.stylehub-israel.com
SHA-256: e22df4fa7ed35954775f91c20ba8c6d79fb5b25e38620223b466759c9f668411 · crt.sh ↗

serial, signature, key, TLS and the full certificate

Subject: CN=stylehub-israel.com
Serial: 99f1130f
Signature: sha256ECDSA
Public key: EC secp256r1
SHA-1: 879f1af1cf662b195f67b4e6a3a43f3590f3749c

{ "cert_signature": { "signature_algorithm": "sha256ECDSA" }, "extensions": { "subject_alternative_name": [ "stylehub-israel.com", "www.stylehub-israel.com" ] }, "issuer": { "C": "US", "CN": "MT1", "O": "Mock Trust Services" }, "public_key": { "algorithm": "EC", "ec": { "oid": "secp256r1" } }, "serial_number": "99f1130f", "subject": { "CN": "stylehub-israel.com" }, "thumbprint": "879f1af1cf662b195f67b4e6a3a43f3590f3749c", "thumbprint_sha256": "e22df4fa7ed35954775f91c20ba8c6d79fb5b25e38620223b466759c9f668411", "validity": { "not_after": "2026-12-19 00:00:00", "not_before": "2026-09-20 00:00:00" }, "version": "V3" }

Jump to Servers urlscan & similar sites Passive DNS & relations

198.51.100.50

United States · Ashburn · AS64569 · Mock Hosting LLC · 198.51.100.0/24 · RIPE NCC

0 of 94 engines flag this IP · 5 sites hosted, 2 flagged · 0 communicating files

VirusTotal IP ↗Shodan ↗AbuseIPDB ↗Censys host ↗ open server page →

Abuse reports · AbuseIPDB — what other defenders reported about this server in the last 90 days

0/ 100

No reports in the last 90 days

Data Center/Web Hosting/Transit · Mock Hosting LLC

A score of 25 or more means several independent reporters saw abuse from this IP: phishing, scanning, spam or brute force. A fresh kit on a clean IP scores 0 — unknown, not clean.

SITES HOSTED ON THIS SERVER (passive DNS, each with its own detections)

Last resolved	Detections	Domain
2026-10-13	5/ 95	stylehub-israel.com	VT ↗ · urlscan ↗
2026-10-07	5/ 95	wallet-sync-0050.online	VT ↗ · urlscan ↗
2026-10-11	0/ 90	secure-login-0050.top	VT ↗ · urlscan ↗
2026-10-05	0/ 90	support-desk-0050.site	VT ↗ · urlscan ↗
2026-10-09	0/ 90	verify-account-0050.xyz	VT ↗ · urlscan ↗

COMMUNICATING FILES not fetched yet

IP WHOIS record

inetnum: 198.51.100.0 - 198.51.100.255 org-name: Mock Hosting LLC abuse-mailbox: abuse@mock.example

engine verdicts for this IP (12)

Engine	Category	Result
BitDefender	harmless	clean
CRDF	harmless	clean
ESET	harmless	clean
Fortinet	harmless	clean
Google Safebrowsing	harmless	clean
Kaspersky	harmless	clean
Netcraft	harmless	clean
OpenPhish	harmless	clean
Phishtank	harmless	clean
Quttera	harmless	clean
Sophos	harmless	clean
Webroot	harmless	clean

urlscan.io scan

not flagged by urlscan

Netherlands 203.0.113.66AS64512 BulletproofHost BV server nginx 23 requests · 2 domains · 1 IPs · 1 countries scanned 2026-10-14 09:52

title: stylehub-israel.com - Sign in

full urlscan result ↗all scans of stylehub-israel.com ↗

domains contacted by the page (2)

stylehub-israel.com · cdn.mock-static.example

Similar sites 30

Other pages urlscan has seen that share this site's page hash (same kit), its server, or the brand name.

Same page (identical document hash) 4hash:44ee90b973bb7a357d32ad4752710d8ccf2ea8cff6fd79727007fce8c576220c

the same HTML served elsewhere — the same phishing kit

Seen	Verdict	Domain		Title
2026-09-16	—	shopn0va.com	urlscan ↗ · VT ↗	shopn0va.com - Sign in
2026-09-15	—	shopnova-login.com	urlscan ↗ · VT ↗	shopnova-login.com - Sign in
2026-09-14	—	secure-shopnova.com	urlscan ↗ · VT ↗	secure-shopnova.com - Sign in
2026-09-08	—	shopnova.co	urlscan ↗ · VT ↗	shopnova.co - Sign in

Same server 0page.ip:203.0.113.66

other pages scanned on the same IP

none

Same brand name 26page.domain:shopnova

domains containing the brand name

Seen	Verdict	Domain		Title
2026-10-14	—	shopnova-partners.com	urlscan ↗ · VT ↗	shopnova-partners.com - Sign in
2026-10-13	—	shopnova-blog.net	urlscan ↗ · VT ↗	shopnova-blog.net - Sign in
2026-10-12	—	shopnovafans.com	urlscan ↗ · VT ↗	shopnovafans.com - Sign in
2026-10-11	—	shopnova-reviews.com	urlscan ↗ · VT ↗	shopnova-reviews.com - Sign in
2026-10-10	—	shopnova-careers.com	urlscan ↗ · VT ↗	shopnova-careers.com - Sign in
2026-10-09	—	shopnova-deals.com	urlscan ↗ · VT ↗	shopnova-deals.com - Sign in
2026-10-08	—	shopnova-status.com	urlscan ↗ · VT ↗	shopnova-status.com - Sign in
2026-10-07	—	shopnova-community.org	urlscan ↗ · VT ↗	shopnova-community.org - Sign in
2026-10-06	—	shopnova-press.com	urlscan ↗ · VT ↗	shopnova-press.com - Sign in
2026-10-05	—	shopnova-events.com	urlscan ↗ · VT ↗	shopnova-events.com - Sign in
2026-09-24	—	shopnova.com	urlscan ↗ · VT ↗	shopnova.com - Sign in
2026-09-23	—	www.shopnova.com	urlscan ↗ · VT ↗	www.shopnova.com - Sign in
2026-09-22	—	shopnova.co.il	urlscan ↗ · VT ↗	shopnova.co.il - Sign in
2026-09-13	—	shopnova-verify.com	urlscan ↗ · VT ↗	shopnova-verify.com - Sign in
2026-09-10	—	shopnova-account.net	urlscan ↗ · VT ↗	shopnova-account.net - Sign in
2026-09-09	—	shopnova-support-center.com	urlscan ↗ · VT ↗	shopnova-support-center.com - Sign in
2026-09-06	—	shopnova-giftcard.com	urlscan ↗ · VT ↗	shopnova-giftcard.com - Sign in
2026-09-05	—	shopnova-refund.net	urlscan ↗ · VT ↗	shopnova-refund.net - Sign in
2026-09-04	—	shopnova-verification.com	urlscan ↗ · VT ↗	shopnova-verification.com - Sign in
2026-09-03	—	shopnova--sneakers.com	urlscan ↗ · VT ↗	shopnova--sneakers.com - Sign in
2026-09-02	—	shopnova-eu.com	urlscan ↗ · VT ↗	shopnova-eu.com - Sign in
2026-09-01	—	shopnova-id-check.com	urlscan ↗ · VT ↗	shopnova-id-check.com - Sign in
2026-08-20	—	shopnova-support.com	urlscan ↗ · VT ↗	shopnova-support.com - Sign in
2026-08-19	—	shopnova-review.com	urlscan ↗ · VT ↗	shopnova-review.com - Sign in
2026-08-18	—	shopnova-coupons.com	urlscan ↗ · VT ↗	shopnova-coupons.com - Sign in

Passive DNS replication 1

Every IP this domain has resolved to, with how many engines flag that IP. Click an IP to see the other sites on it.

Date resolved	Detections (IP)	IP
2026-09-27	3/ 92	198.51.100.50

Subdomains 3

Host	Detections
login.stylehub-israel.com	2/ 92
mail.stylehub-israel.com	0/ 90
www.stylehub-israel.com	0/ 90

Communicating files 0 not fetched yet

Malware samples that contacted this domain while being analysed.

Historical WHOIS · VirusTotal 1

2026-09-14 · Mock Registrar LLC

Registrant Organization: REDACTED FOR PRIVACY
Registrant Country: US
Name Server: NS1.MOCK-DNS.EXAMPLE

Historical certificates 0 VT · 3 CT not fetched yet

CERTIFICATE TRANSPARENCY (crt.sh / CertSpotter) — the registrable domain and its subdomains

Not before	Names	Issuer
2026-09-30	stylehub-israel.com, www.stylehub-israel.com	C=US, O=Let's Encrypt, CN=R3
2026-09-01	mail0.stylehub-israel.com-cdn.net	Mock CA
2026-09-01	mail1.stylehub-israel.com-cdn.net	Mock CA

Observation timeline

2026-10-12 06:41:48 · HTTP 200 · state new · datacenter · content changed · 12591006be01 · screenshot
2026-10-12 06:46:01 · HTTP 200 · state flagged · datacenter · 12591006be01 · screenshot

first seen 2026-10-12 06:41 · scans 2 · next 2026-10-12 12:46 · candidate state flagged · WHOIS history →

Score history

When	Score	Severity	Confidence	Version
2026-10-12 06:41:48	57	high	90%	shop-v2-d92668ce
2026-10-12 06:46:01 current	57	high	90%	shop-v2-d92668ce

Evidence · chain of custody ? ⚙ immutable · DB-enforced

Append-only by the database: UPDATE and DELETE are rejected by triggers, even for an admin. Every artifact is stored under its own SHA-256, so the hash is literally the file name — any tampering is visible. Role: primary = proves a signal · supporting = corroborates · contradicting = argues the site is legitimate · context = background.

Observed (UTC)	Type	Role	Source	SHA-256	Details
2026-10-12 06:46:01	reputation	contradicting	mock:safebrowsing	—	status: negative
2026-10-12 06:46:01	reputation	context	mock:urlhaus	—	status: unknown
2026-10-12 06:46:01	reputation	context	mock:virustotal	—	status: unknown
2026-10-12 06:46:01	whois	context	mock:rdap	—	status: positive
2026-10-12 06:46:01	favicon	context	mock:playwright	17e75bb2859ac9e2	mmh3: -423502147 phash: af3dead482c0952e	artifact
2026-10-12 06:46:01	screenshot · datacenter view	context	mock:playwright	32c298340f5babe4	phash: c1067d1e6a571567 dhash: bb93d2d3d99a9393 palette: ['#469590', '#36384a', '#ae…	artifact
2026-10-12 06:46:01	html · datacenter view	primary	mock:playwright	12591006be01b95f	title: ארכיון ShopNova - Style Hub… forms: 0 parked: False	artifact
2026-10-12 06:46:01	http	supporting	mock:playwright	12591006be01b95f	status: 200 final_url: https://stylehub-israel.com… content_type: text/html; charset=utf-8
2026-10-12 06:46:01	dns	supporting	mock:local_dns	—	status: positive
2026-10-12 06:41:48	reputation	contradicting	mock:safebrowsing	—	status: negative
2026-10-12 06:41:48	reputation	context	mock:urlhaus	—	status: unknown
2026-10-12 06:41:48	reputation	context	mock:virustotal	—	status: unknown

show all 18 evidence rows from 2 scan(s)

2026-10-12 06:41:47	whois	context	mock:rdap	—	status: positive
2026-10-12 06:41:47	favicon	context	mock:playwright	17e75bb2859ac9e2	mmh3: -423502147 phash: af3dead482c0952e	artifact
2026-10-12 06:41:47	screenshot · datacenter view	context	mock:playwright	32c298340f5babe4	phash: c1067d1e6a571567 dhash: bb93d2d3d99a9393 palette: ['#469590', '#36384a', '#ae…	artifact
2026-10-12 06:41:47	html · datacenter view	primary	mock:playwright	12591006be01b95f	title: ארכיון ShopNova - Style Hub… forms: 0 parked: False	artifact
2026-10-12 06:41:47	http	supporting	mock:playwright	12591006be01b95f	status: 200 final_url: https://stylehub-israel.com… content_type: text/html; charset=utf-8
2026-10-12 06:41:47	dns	supporting	mock:local_dns	—	status: positive

stylehub-israel.com

What do I do · get it taken down

Notes · for you and the next analyst — kept with the finding, never edited, also in Activity

Conclusion · how sure are we that it sells fakes? — every letter and report claims only this

Shop checks · is this a real seller of ShopNova products? · separate from the phishing score (shop-v2-d92668ce)

AI: is this shop legitimate? · advisory, never part of the score

Where it was found

Report to Meta · the ads and the pages that send buyers to this shop

StyleHub.Israel 1 adalso on Instagram

FOR THE TRADEMARK OWNER

Explain Finding — why it was flagged · every signal, its points and the evidence behind it

How the score adds up

Group caps ? · stop correlated evidence from double counting

Confidence ? · 90%

Suspect vs. official similarity 50%

VirusTotal · security vendors

Server reputation · AbuseIPDB

Categories

JARM

Engines flagged first

Look it up elsewhere

Registration data (RDAP)

Registrar & abuse contact

Nameservers

WHOIS history · every WHOIS snapshot WhoisXML has recorded for stylehub-israel.com

First registered

Snapshots

Owners seen

Registrars

Owner details now

TIMELINE

SNAPSHOTS · CHANGED FIELDS MARKED

DNS records source: VirusTotal

HTTPS certificate from VirusTotal

198.51.100.50

Abuse reports · AbuseIPDB — what other defenders reported about this server in the last 90 days

SITES HOSTED ON THIS SERVER (passive DNS, each with its own detections)

COMMUNICATING FILES not fetched yet

urlscan.io scan

Similar sites 30

Same page (identical document hash) 4hash:44ee90b973bb7a357d32ad4752710d8ccf2ea8cff6fd79727007fce8c576220c

Same server 0page.ip:203.0.113.66

Same brand name 26page.domain:*shopnova*

Passive DNS replication 1

Subdomains 3

Communicating files 0 not fetched yet

Historical WHOIS · VirusTotal 1

Historical certificates 0 VT · 3 CT not fetched yet

CERTIFICATE TRANSPARENCY (crt.sh / CertSpotter) — the registrable domain and its subdomains

Observation timeline

Score history

Evidence · chain of custody ? ⚙ immutable · DB-enforced

Same brand name 26page.domain:shopnova