btlmklar.shop
Appeared in the .shop zone on Wednesday, September 16, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Random-consonant .shop domain registered today hosting a four-product 'curated marketplace finds' storefront with scraped Amazon/Wish/Mercari/Poshmark listing images, generic free-shipping/30-day-return trust badges and cart forms posting to itself — the classic throwaway fake-shop shape; the PayPal mentions are only checkout-badge language, not an impersonation of PayPal's site or login.
The page prominently displays 'Secure PayPal Checkout' in the header and repeatedly mentions PayPal as a payment method, but the domain btlmklar.shop is not PayPal's property. The page has forms posting to itself with hidden fields (action, slug, cart_token)—a sealed-room phishing pattern. The page impersonates a legitimate e-commerce storefront to deceive visitors into entering payment or credential information through a fake PayPal checkout flow.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, September 16, 2026
Same data as JSON: /api/zone/domain/btlmklar.shop. This page is not indexed by search engines and does not link to the site it describes.