Criticalscore 60 · flagged Tuesday, September 22, 2026

northtv.tech

Appeared in the .tech zone on Tuesday, September 22, 2026; by the end of that day the census found active website about streaming piracy. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

page impersonates a brand
matched: PayPal
+22
brand in page title, not in the name
matched: apple
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Nameserver provider
Nameservers
aster.dns-parking.com, helios.dns-parking.com
First-day state
active website
HTTP status
200
Page title
Northstar — Live and on-demand on Apple TV
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks like abuseconfidence 82%· claude-opus-5

Self-branded "Northstar" IPTV reseller offering live TV, movies and series channels (ABC feed shown in the tvOS mock-up) for $15/month with payment by CashApp, crypto and PayPal — the hallmark shape of an unlicensed streaming/piracy front rather than a licensed service; the Apple TV references describe the playback platform, not an impersonation of Apple.

First passlooks like phishingtarget: Appleconfidence 92%· claude-haiku-4-5

The page impersonates Apple TV by using Apple's branding, product name, and interface language ('Apple TV', 'tvOS experience') while the domain northtv.tech does not own or represent Apple. The page contains a form posting to itself (sealed-room phishing shape) designed to capture credentials under the pretense of an Apple TV subscription service, combined with PayPal payment language to appear legitimate.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, September 22, 2026

Screenshot of northtv.tech taken by the zone census on 2026-09-22

Same data as JSON: /api/zone/domain/northtv.tech. This page is not indexed by search engines and does not link to the site it describes.