Scanner shows a highly suspicious, newly registered domain attempting to impersonate Wise. The page title and visible branding align with Wise, but the host is a distinct, unknown domain (4 days old) with a large set of SPA assets and tracking endpoints, indicating an attempt to capture user interactions and credentials. The combination of brand impersonation, new domain age, and extensive script loading plus analytics beacons supports a high phishing risk requiring urgent action. The presence of a Cloudflare IP and the WAF-like signals do not mitigate the impersonation indicator; rather, they underscore anti-detection measures while still delivering counterfeit UI.