New Threats

navigg.pro has been flagged as dangerous by an automated scan.

• Confidence: 80/100
• Domain age: 4 days

This website is a scam that impersonates the professional gaming team Natus Vincere (NAVI) to trick users into a fake gambling or item-opening scheme.

Key findings:

• Impersonates the well-known NAVI esports brand on an unofficial domain
• Uses a very new domain registered only 4 days ago
• Promotes a 'roulette' or 'case opening' scam common in gaming communities

vidara.so has been flagged as suspicious by an automated scan.

• Confidence: 60/100
• Domain age: 40 days

This website displays a deceptive advertisement that mimics a system notification to encourage you to download unknown files.

Key findings:

• The page shows a fake 'Download is ready' pop-up designed to look like a system alert
• The site uses a newly registered domain (40 days old)
• The content appears to be a video player overlaying deceptive advertising

predict-devai.buzz has been flagged as suspicious by an automated scan.

• Confidence: 65/100
• Domain age: 35 days

This website is very new and uses a high-risk domain extension, and the page content tries to trick you into clicking a link to view an "Instagram Reels" video.

Key findings:

• Domain registered only 35 days ago
• Uses a high-risk domain extension (.buzz)
• Page title is "Instagram Reels"
• Page text says "Пользователь прислал вам Reels" (A user sent you Reels) and asks you to click a link

heartvelvet.pro has been flagged as suspicious by an automated scan.

• Confidence: 60/100
• Domain age: 42 days

This website promotes an 'AI Adult Game' and asks users to install an app, but it is hosted on a very new domain with a high-risk TLD, which is often used for scams.

Key findings:

• The domain is only 42 days old and uses a high-risk '.pro' TLD.
• The page promotes an 'AI Adult Game' and encourages users to install an app.
• The page claims to be 'Porn Hub Game' but is not hosted on a Pornhub domain.

expdepyapmentse.com has been flagged as dangerous by an automated scan.

• Confidence: 80/100
• Domain age: 0 days

This website is impersonating Expedia to steal your personal and payment information. It uses a fake domain name and a copied layout to trick you into entering sensitive details.

Key findings:

• The domain name is a misspelled version of the real Expedia website
• The site was registered less than 24 hours ago
• The page uses the official Expedia logo and branding without authorization
• It asks for personal information and payment details on an unofficial domain

tsrpilot.com has been flagged as suspicious by an automated scan.

• Confidence: 60/100
• Domain age: 12 days

This page uses a blurred background and a verification check to hide its content, which is a common tactic used to bypass security scanners.

Key findings:

• The page content is intentionally blurred behind a verification box
• The initial link uses a very new domain (12 days old) to redirect users
• The site forces a robot check before showing any actual information

flurry-online.com has been flagged as suspicious by an automated scan.

• Confidence: 65/100
• Domain age: 171 days

This website uses the name and logo of Flurry, a well-known mobile analytics company, but is hosted on an unofficial domain and asks for a phone number and password.

Key findings:

• Uses the branding of a known company on an unrelated domain
• Requests sensitive login information including a phone number
• The website is relatively new and lacks official company information

roblox.com.gl has been flagged as dangerous by an automated scan.

• Confidence: 90/100
• Domain age: 24 days

This website is impersonating Roblox by using a similar web address, which is a common tactic used in online scams.

Key findings:

• Impersonates 'roblox'
• Uses a similar web address (tld_squatting)
• Domain is very new (24 days old)

tsk.re has been flagged as suspicious by an automated scan.

• Confidence: 69/100
• Domain age: 35 days

This website is impersonating Nextcloud, a legitimate file hosting service, and is asking for login credentials on a newly registered domain that is not associated with Nextcloud.

Key findings:

• The page title and visible text claim to be 'Nextcloud'.
• The page contains a login form asking for username and password.
• The domain 'nc.tsk.re' is newly registered (35 days old) and is not the official Nextcloud domain.

influencerplatform.app has been flagged as suspicious by an automated scan.

• Confidence: 60/100
• Domain age: 17 days

This page asks for extensive personal information on a very new domain that is not officially associated with the brand it claims to represent.

Key findings:

• The page asks for your first name, last name, email, phone, date of birth, and full address.
• The website domain is only 17 days old.
• The domain 'influencerplatform.app' is not the official website for SKIMS, despite the page mentioning 'SKIMS Partner Community'.

effectivegatecpm.com has been flagged as dangerous by an automated scan.

• Confidence: 90/100
• Domain age: 160 days

This domain is being used for malicious redirects and phishing, often trying to trick security systems by redirecting to legitimate sites or showing different content to scanners than to real users.

Key findings:

• Domain is classified as potentially malicious with a DANGER-level admin note.
• Confirmed use of redirect cloaking to bypass security scanners.
• Reports of phishing content hosted on sub-paths of this domain.
• High traffic rank for a very young domain, which is typical for large-scale malicious schemes.

flaxmovies.online has been flagged as suspicious by an automated scan.

• Confidence: 60/100
• Domain age: 98 days

This website offers free streaming of copyrighted movies and TV shows, which is a common tactic used to lure users into clicking malicious advertisements or downloading harmful software.

Key findings:

• Offers free streaming of copyrighted content without authorization
• Uses a newly registered domain with a high-risk extension
• Potential for deceptive advertisements or malicious redirects when interacting with the player

canadianbreadsettlement.top has been flagged as suspicious by an automated scan.

• Confidence: 65/100
• Domain age: 1 days

This website was registered very recently and failed to load any content, which is often a sign of a temporary or deceptive site.

Key findings:

• The domain was registered only 1 day ago
• Uses a high-risk .top domain extension
• The page failed to display any content or information

gov-sjc.life has been flagged as dangerous by an automated scan.

• Confidence: 80/100
• Domain age: 0 days

This website impersonates the Florida Department of Highway Safety and Motor Vehicles to collect personal information through a form, despite being hosted on a newly registered, suspicious domain.

Key findings:

• The website's title and content impersonate the Florida Department of Highway Safety and Motor Vehicles.
• The domain is newly registered and appears to be a random string of characters, which is highly suspicious.
• The page contains a form that could be used to collect personal information.

vaultixglobal.com has been flagged as dangerous by an automated scan.

• Confidence: 95/100
• Domain age: 167 days

This website is impersonating a banking platform and asks for your login credentials on a domain that has been classified as potentially malicious.

Key findings:

• The website is classified as potentially malicious.
• The page title and content claim to be a 'Secure Banking Platform' named 'Vaultix Group'.
• The page asks for your email and password.
• The domain 'vaultixglobal.com' is not associated with a legitimate banking institution.

spotisaver.net has been flagged as suspicious by an automated scan.

• Confidence: 60/100
• Domain age: 174 days

This website claims to download music from Spotify but asks for your email address, which is unusual for a simple download service and could be used for unwanted marketing or phishing.

Key findings:

• The website is only 174 days old, which is relatively new.
• It claims to be a "Spotify to MP3 Downloader" but is not affiliated with Spotify.
• The site asks for your email address in a form, which is not necessary for a music download service.

maddixi.me has been flagged as dangerous by an automated scan.

• Confidence: 90/100
• Domain age: 108 days

This domain is confirmed to be used for malicious redirection and phishing, often cloaking dangerous links in social media scams.

Key findings:

• Domain classified as potentially malicious for phishing and redirection.
• Admin note confirms active involvement in deceptive social media campaigns.
• Functions as a malicious bridge to cloak final destinations of links.
• Exhibits characteristics of a 'throwaway' domain used for short-term scam operations.

cartaooocontinenteie.cyou has been flagged as dangerous by an automated scan.

• Confidence: 85/100
• Domain age: 66 days

This website is impersonating the Portuguese 'Cartão Continente' loyalty program to steal personal information.

Key findings:

• The domain name 'cartaooocontinenteie.cyou' is a clear imitation of the official brand
• The page uses the official 'Cartão Continente' logo and branding without authorization
• The site asks for your phone number to 'check points' on a non-official, recently registered domain

bookingil.com has been flagged as dangerous by an automated scan.

• Confidence: 90/100
• Domain age: 120 days

This website is impersonating 'booking.com' by using a similar-looking web address to trick visitors.

Key findings:

• Impersonates 'booking.com'
• Uses a deceptive web address (combosquatting)

googglemeetts.live has been flagged as dangerous by an automated scan.

• Confidence: 90/100
• Domain age: 34 days

This website is impersonating Google Meet by using a very similar web address. It was also registered very recently, which is a common tactic for scam sites.

Key findings:

• Impersonates Google Meet
• Domain registered only 34 days ago
• Uses a high-risk domain extension (.live)