The completed capture reached cobatlab.org, observed the page title “COBALT LAB - Офицальный Сайт :: #1 проект по открытию кейсов Rust :: cobaltlab.tech - Честная и прозрачная игра.”, and identified the presented service as COBALT LAB. Captured artifacts contain suspicious evidence, but they do not establish an actionable abuse case.
The scanner reached the target and captured every planned artifact.
Each finding below is derived from a captured artifact. Expand one to see exactly what it was drawn from.
The page brands itself as COBALT LAB and references official domain cobaltlab.tech, but is hosted on cobatlab.org, a 31-day-old misspelling. This indicates impersonation.
Visual capture shows login/register prompts on a typosquat domain, and the SPA likely renders credential forms dynamically. No static form captured but behavior is consistent with credential harvesting.
2 domains
No known kit signatures matched this capture.