<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
<channel>
<title>WatchOut alerts</title>
<link>https://watchout.report</link>
<description>See the scams going around before they reach you.</description>
<language>en</language>
<item><title>WatchOut for Fake Signal support messages ask for recovery keys</title><link>https://watchout.report/alerts/signal-support-impersonation/</link><guid isPermaLink="true">https://watchout.report/alerts/signal-support-impersonation/</guid><pubDate>Sat, 22 Aug 2026 12:00:00 GMT</pubDate><description>A message pretending to be Signal support claims that an account is at risk and asks the recipient to click Accept and provide a recovery key. This is a scam warning: never share a recovery key, registration code, verification code, password, or other account secret in response to an unexpected message.</description><enclosure url="https://scamarchive.org/images/alerts/signal-support-impersonation.webp" type="image/webp" length="0"/></item>
<item><title>WatchOut for Kids: watch out for game sites using lookalike domains</title><link>https://watchout.report/alerts/fake-roblox-lookalike-domain-vwww-roblox-co/</link><guid isPermaLink="true">https://watchout.report/alerts/fake-roblox-lookalike-domain-vwww-roblox-co/</guid><pubDate>Sat, 22 Aug 2026 12:00:00 GMT</pubDate><description>A website using the address vwww-roblox[.]co uses Roblox's name with an unusual vwww- prefix and a different domain ending. Lookalike game sites can be used to trick players into entering passwords, verification codes, or payment details. Do not sign in through a link sent in a chat, video, ad, or game message.</description><enclosure url="https://scamarchive.org/images/alerts/fake-roblox-lookalike-domain-vwww-roblox-co.webp" type="image/webp" length="0"/></item>
<item><title>WatchOut for Phishing campaign impersonating the Canadian government shows signs of preparing German government lures</title><link>https://watchout.report/alerts/canadian-government-phishing-german-pivot-2026/</link><guid isPermaLink="true">https://watchout.report/alerts/canadian-government-phishing-german-pivot-2026/</guid><pubDate>Fri, 07 Aug 2026 12:00:00 GMT</pubDate><description>A CSRF investigation mapped a phishing email impersonating the Government of Canada and Service Canada. The Canadian redirect chain is now offline, but the same GitHub account uploaded a logo belonging to Germany's Federal Motor Transport Authority (KBA) on 2026-08-07. This suggests preparation for a possible German pivot; no live German phishing page has been confirmed. CSRF reported the GitHub account to GitHub.</description><enclosure url="https://watchout.report/og/canadian-government-phishing-german-pivot-2026.png" type="image/png" length="0"/></item>
<item><title>WatchOut for Suspected Zillow impersonation and task-scam site: zillowofficial[.]com</title><link>https://watchout.report/alerts/zillow-impersonation-task-scam/</link><guid isPermaLink="true">https://watchout.report/alerts/zillow-impersonation-task-scam/</guid><pubDate>Tue, 04 Aug 2026 12:00:00 GMT</pubDate><description>A reported website uses Zillow branding while presenting an agent or in-house tester program. Its FAQ describes daily order sets, negative balances on premium tasks, and topping up an account before work can continue. A separate domain is reported as the support destination. These are strong warning signs associated with task scams and impersonation, but this alert does not establish who operates the sites or whether Zillow was involved.</description><enclosure url="https://watchout.report/og/zillow-impersonation-task-scam.png" type="image/png" length="0"/></item>
<item><title>WatchOut for Suspected Nike recruitment impersonation site presents a Facebook-style login</title><link>https://watchout.report/alerts/nike-recruitment-facebook-login-impersonation/</link><guid isPermaLink="true">https://watchout.report/alerts/nike-recruitment-facebook-login-impersonation/</guid><pubDate>Tue, 04 Aug 2026 12:00:00 GMT</pubDate><description>A reported recruitment-themed website at nikerecruits[.]com appears to use Nike branding and presents a Facebook-style sign-in page. The combination may be intended to trick visitors into entering account credentials. This is an initial warning based on the reported page appearance and requires review before publication.</description><enclosure url="https://watchout.report/og/nike-recruitment-facebook-login-impersonation.png" type="image/png" length="0"/></item>
</channel>
</rss>
