Live threat picture

Scam Radar

What's circulating right now, from public threat data: fresh malicious-URL activity and look-alike domains of brands scammers love to impersonate. Refreshed several times a day.

Updated about 5 hours ago

Malicious URLs

Fresh malicious-URL activity

100 malicious URLs in the latest public feed batch — 77 still online right now.

elf Mozi 32-bit mirai mips

Recently affected hosts (defanged — do not visit):

sweet-snowflake-8a7e[.]uploadesclintesss[.]workers[.]dev
cryptefilea[.]infy[.]click
heroestales[.]com
aethersyncmatrix5[.]lol
uafsoftware[.]in
dsgagfsahkfsahfjs[.]shop

Source: URLhaus by abuse.ch (researcher-curated public feed)

Look-alike domains

Look-alike sweep: frequently impersonated brands

We generate the most common typo and look-alike spellings of these brands' real domains and check which ones actually exist in DNS today.

Brand	Live look-alikes	Registered (dormant)	Examples (defanged)
Interac interac.ca	10	3	`intera[.]ca` `interac[.]co` `interac[.]com` `interac[.]info`
Government of Canada canada.ca	23	2	`anada[.]ca` `c4nada[.]ca` `ca-nada[.]ca` `caada[.]ca`
Canada Post canadapost-postescanada.ca	4	0	`canadapost-postecanada[.]ca` `canadapost-postescanada[.]com` `canadapost-postescanada[.]org` `canadapostpostescanada[.]ca`
Desjardins desjardins.com	23	2	`dejsardins[.]com` `desajrdins[.]com` `desardins[.]com` `desjadins[.]com`
RBC rbc.com	22	2	`bc[.]com` `brc[.]com` `dbc[.]com` `ebc[.]com`
BMO bmo.com	26	3	`8mo[.]com` `b-mo[.]com` `bbmo[.]com` `bjo[.]com`
Amazon amazon.ca	22	7	`aamazon[.]ca` `aamzon[.]ca` `aazon[.]ca` `amaazon[.]ca`
Netflix netflix.com	34	2	`account-netflix[.]com` `entflix[.]com` `etflix[.]com` `n3tflix[.]com`

A registered look-alike is not automatically malicious — companies defensively register many of their own typos. The point is awareness: these spellings exist, so read domains carefully.

Why the dots are in brackets

Host names on this page are deliberately broken with [.] so they can't be clicked or auto-linked. Don't reassemble and visit them.

Scam of the Week

The fake concert-ticket resale scam — A sold-out show, a stranger selling tickets at face value, and a request to e-Transfer first. The tickets never arrive - or were sold to a dozen people - and an accepted e-Transfer is almost impossible to get back.

Read this week's alert Check a suspicious link