intellectum.top
Appeared in the .top zone on Tuesday, September 1, 2026; by the end of that day the census found active website about beauty fashion. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
intellectum.top serves a pixel-perfect clone/reverse-proxy of an Amazon.de product page (Amazon logo, 'Hello, sign in / Account & Lists', Buy Now, anti-csrftoken-a2z hidden fields) on a brand-unrelated Namecheap/Cloudflare .top domain; links back to real amazon.de assets are decoys, and the checkout/sign-in flow on this mirror is positioned to harvest Amazon credentials and payment data.
The domain intellectum.top impersonates Amazon.de by presenting a complete Amazon product page (including Amazon logo, layout, and branding) with a form posting to itself containing hidden CSRF tokens and payment fields (customerVisiblePrice). The page title and content claim to be Amazon.de while the domain name is unrelated to Amazon, and the self-posting form with no legitimate backend is the classic phishing sealed-room pattern designed to capture payment or credential data.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, September 1, 2026
Same data as JSON: /api/zone/domain/intellectum.top. This page is not indexed by search engines and does not link to the site it describes.