spektrum.work
Appeared in the .work zone on Thursday, September 10, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Brand-new domain serving a stock template with lorem-ipsum copy and fake 'John Doe / Maria Garcia' testimonials, whose only interactive element is an email-capture 'Subscribe' form plus an 'Unsubscribe' link and a stray reference to 'NewSplits readers' — the hallmark of a coupon/deals lead-gen or snowshoe-spam list-building shell rather than a real business; no impersonation of Spectrum (content is unrelated to the ISP), so the typo similarity alone is not decisive.
The domain spektrum.work is a one-letter typo of 'spectrum' and hosts a form posting to itself over HTTP with no offsite links, matching the 'sealed-room' phishing pattern. However, the page presents as a generic deal-aggregation service with its own branding ('Spektrum Creative Brands'), not impersonating a specific organisation, making it unclear whether this is a phishing attack, a legitimate (if poorly named) business, or a squat awaiting deployment. The form requests only an email address,
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, September 10, 2026
Same data as JSON: /api/zone/domain/spektrum.work. This page is not indexed by search engines and does not link to the site it describes.