Criticalscore 100 · flagged Thursday, October 15, 2026

pay-cloud.app

Appeared in the .app zone on Thursday, October 15, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: cloud≈icloud
+28
lure words (login, verify, secure…)
matched: pay
+26
brand name behind Cloudflare
matched: cloudflare.com
+6
page impersonates a brand
matched: PayPal
+22
brand in page title, not in the name
matched: shopify
+20
Registrar
—
Nameserver provider
Nameservers
alec.ns.cloudflare.com, rosalyn.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
Orchestrator Cloud — Every payment rail, one cockpit
Has a form
no
Brand echoed
icloud

Model opinions

Second opinionsuspiciousconfidence 55%· claude-opus-5-5

The page impersonates no one: it is a self-branded 'Orchestrator Cloud' payment-orchestration SaaS that only lists PayPal, Shopify and Stripe as integrations, has no credential form, and 'cloud≈icloud' is a false positive. Its pitch is still concerning: spreading volume across many merchant accounts ('MID-01…05'), auto-pausing accounts that start declining, and auto-generated shareable parcel-tracking pages fit MID-stacking and fake-fulfilment tooling for high-risk or scam merchants, so it is no

First passlooks benignconfidence 85%· claude-haiku-4-5

The page is a legitimate payment orchestration platform (Orchestrator Cloud) with its own branding, product name, and dashboard offering. While the domain contains 'pay' and 'cloud', and the scorer flagged brand similarities, the page presents a genuine SaaS product with its own identity, not impersonation of PayPal, Shopify, or iCloud. The scorer's detection of brand-in-title-not-name reflects that the page mentions partner integrations (PayPal, Shopify, Stripe, etc.) as supported payment provi

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, October 15, 2026

Screenshot of pay-cloud.app taken by the zone census on 2026-10-15

Same data as JSON: /api/zone/domain/pay-cloud.app. This page is not indexed by search engines and does not link to the site it describes.