Demo workspaceSample data for Kestrel Pay, a fictional bank. Nothing here is a live customer feed.
Signal workspace
Giveaway page charges a release fee to claim a prize.
Unofficial page runs a prize draw in the brand livery and ends the claim flow at a release fee, which no official promotion has ever asked for.
Observed content
You are one of fifty members selected for the anniversary bonus. Pay the small processing fee to release your reward before the claim window closes tonight, then reply with your receipt and the bonus lands in your wallet instantly. Only fifty places, and they are going fast.
Why we flagged it
Page uses the brand wordmark and card artwork, has no ownership link to the verified page, and conditions a promised payout on an upfront transfer.
79
severity
- Relevance
- 93%
- First seen
- 6 hr ago
- Check version
- sentinel-threat-v1
Signs of harm
money-solicitationofficial-insignia
Evidence
Each capture is hashed on write. The digest is what makes the record checkable later.
- Screenshotcrawl4ai-screenshot388 KB · 12 Mar 2026, 08:23 UTC
sha256
0c435a567159fbd12e7925e3d1a2eb893a3377302e3df2fefeb19e70880ad6e5 - Screenshotcrawl4ai-screenshot262 KB · 12 Mar 2026, 08:24 UTC
sha256
7aba22919105131af4c648853e597b632a2d1281ca2d9f0bdbb611ff9526f5cb - Page archivecrawl4ai-archive51 KB · 12 Mar 2026, 08:25 UTC
sha256
060cd641f9d44ab9377f55f540642785c46e5f4539546e262b414b025c8851f3
Decision trail
Append-only. Every status change records who and why.
- detectedPage uses the registered wordmark with no ownership link.Collector · System · 6 hr
- detecteddocumentedPost, payment step, and claim page all captured.Priya Raghunathan · Analyst · 6 hr