Live threat picture
Scam Radar
What's circulating right now, from public threat data: fresh malicious-URL activity and look-alike domains of brands scammers love to impersonate. Refreshed several times a day.
Updated about 2 hours ago
Malicious URLs
Fresh malicious-URL activity
100 malicious URLs in the latest public feed batch — 93 still online right now.
Recently affected hosts (defanged — do not visit):
irm[.]stpromotedial[.]comgithub[.]comdrive[.]google[.]comdetek[.]com[.]mxgreen-breeze-ca3a[.]fortunespromailsd[.]workers[.]dev
Source: URLhaus by abuse.ch (researcher-curated public feed)
Look-alike domains
Look-alike sweep: frequently impersonated brands
We generate the most common typo and look-alike spellings of these brands' real domains and check which ones actually exist in DNS today.
| Brand | Live look-alikes | Registered (dormant) | Examples (defanged) |
|---|---|---|---|
| Interac interac.ca |
9 | 3 |
intera[.]ca
intrac[.]ca
nterac[.]ca
interac[.]co
|
| Government of Canada canada.ca |
22 | 2 |
anada[.]ca
c4nada[.]ca
ca-nada[.]ca
caada[.]ca
|
| Canada Post canadapost-postescanada.ca |
4 | 0 |
canadapost-postecanada[.]ca
canadapostpostescanada[.]ca
canadapost-postescanada[.]com
canadapost-postescanada[.]org
|
| Desjardins desjardins.com |
22 | 1 |
dejsardins[.]com
desajrdins[.]com
desardins[.]com
desjadins[.]com
|
| RBC rbc.com |
24 | 3 |
bc[.]com
brc[.]com
dbc[.]com
ebc[.]com
|
| BMO bmo.com |
25 | 4 |
8mo[.]com
b-mo[.]com
bbmo[.]com
bjo[.]com
|
| Amazon amazon.ca |
21 | 8 |
aamazon[.]ca
aamzon[.]ca
aazon[.]ca
amaazon[.]ca
|
| Netflix netflix.com |
31 | 4 |
account-netflix[.]com
etflix[.]com
n3tflix[.]com
neflix[.]com
|
A registered look-alike is not automatically malicious — companies defensively register many of their own typos. The point is awareness: these spellings exist, so read domains carefully.
Host names on this page are deliberately broken with [.] so they can't be clicked or auto-linked. Don't reassemble and visit them.
Scam of the Week
The "free upgrade" from your phone company — Someone calls offering a loyalty deal or a free upgrade from your phone company, and asks you to read back the code that was just texted to you. A device really is ordered - in your name, on your bill - and then a courier or a return label takes it away again.