alipayyy.makeup
Appeared in the .makeup zone on Sunday, August 30, 2026; by the end of that day the census found parked, for sale. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
alipayyy.makeup is a transparent typosquat of Alipay on a novelty TLD that serves no content of its own, instead redirecting to a dated subdomain (2026-08-30.urldance.com) of a Chinese password-gated 'latest URL' portal seen across 647 identical pages — a bulk brand-squat traffic-funnel campaign rather than a page that impersonates Alipay to steal credentials.
The domain alipayyy.makeup is a typosquat on Alipay (missing one 'y', using .makeup TLD) that redirects to a generic password-gating redirect service (urldance.com). This is a classic brand-squat with no legitimate content; the destination page is a generic Chinese-language link directory masquerading as a resource hub, not Alipay's actual site. The pattern matches a redirect-farm squat campaign rather than direct phishing, but the intent to deceive users seeking Alipay is clear.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, August 30, 2026
Same data as JSON: /api/zone/domain/alipayyy.makeup. This page is not indexed by search engines and does not link to the site it describes.