Windows Analysis Report
https://acg.citnow.com/dashboard

{
  "typosquatting": false,
  "unusual_query_string": false,
  "suspicious_tld": false,
  "ip_in_url": false,
  "long_subdomain": false,
  "malicious_keywords": false,
  "encoded_characters": false,
  "redirection": false,
  "contains_email_address": false,
  "known_domain": true,
  "brand_spoofing_attempt": false,
  "third_party_hosting": false
}

URL: https://acg.citnow.com

{
    "contains_trigger_text": false,
    "trigger_text": "",
    "prominent_button_name": "Continue",
    "text_input_field_labels": ["Email address", "Password"],
    "pdf_icon_visible": false,
    "has_visible_captcha": false,
    "has_urgent_text": false,
    "has_visible_qrcode": false,
    "contains_chinese_text": false
}

{
    "contains_trigger_text": false,
    "trigger_text": "",
    "prominent_button_name": "Continue",
    "text_input_field_labels": ["Email address", "Password"],
    "pdf_icon_visible": false,
    "has_visible_captcha": false,
    "has_urgent_text": false,
    "has_visible_qrcode": false,
    "contains_chinese_text": false
}

{
  "brands": [
    "Arnold Clark"
  ]
}

{
  "brands": [
    "Arnold Clark"
  ]
}

```json{  "legit_domain": "arnoldclark.com",  "classification": "known",  "reasons": [    "The brand 'Arnold Clark' is a known car dealership in the UK.",    "The URL 'auth.citnow.com' does not match the legitimate domain 'arnoldclark.com'.",    "The domain 'citnow.com' is not directly associated with Arnold Clark, which raises suspicion.",    "The presence of input fields for 'Email address' and 'Password' on a non-matching domain increases the risk of phishing.",    "The use of a subdomain 'auth' suggests an authentication page, which is a common target for phishing."  ],  "riskscore": 8}
Google indexed: False

```json{  "legit_domain": "arnoldclark.com",  "classification": "known",  "reasons": [    "The brand 'Arnold Clark' is a known car dealership in the UK.",    "The URL 'auth.citnow.com' does not match the legitimate domain 'arnoldclark.com'.",    "The domain 'citnow.com' is not directly associated with Arnold Clark, which raises suspicion.",    "The presence of input fields for 'Email address' and 'Password' on a non-matching domain is a common phishing tactic.",    "The use of a subdomain 'auth' could be an attempt to mimic an authentication page, which is often used in phishing."  ],  "riskscore": 8}
Google indexed: False