Criticalscore 63 · flagged Saturday, September 19, 2026

starlinkconecta.store

Appeared in the .store zone on Saturday, September 19, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: starlink
+30
brand name and brand-styled page
matched: starlink
+15
form on a brand-styled page
matched: has_form
+18
Registrar
Nameserver provider
Nameservers
ns1hwy.name.com, ns2fln.name.com, ns3fqs.name.com, ns4jnz.name.com
First-day state
active website
HTTP status
200
Page title
Starlink Conecta | Instalação e suporte especializado
Has a form
yes
Brand echoed
starlink

Model opinions

Second opinionsuspicioustarget: Starlink (SpaceX)confidence 60%· claude-opus-5

Brazilian-language site uses the Starlink name and an adapted Starlink logo in the domain, title and header while presenting itself as an installation/support service, funnelling visitors' name, phone and location into a WhatsApp operator rather than any verifiable company identity — unauthorised brand appropriation and a lead-capture funnel, but no credential or payment capture to confirm outright phishing.

First passlooks like phishingtarget: Starlinkconfidence 92%· claude-haiku-4-5

The domain starlinkconecta.store impersonates Starlink with its logo, branding, and page title 'Starlink Conecta', presenting itself as an official installation and support service. The form collects personal data (name, phone, location, service type) and directs users to WhatsApp, a classic sealed-room phishing pattern where the operator captures credentials and contact information to facilitate fraud or social engineering against Starlink customers.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, September 19, 2026

Screenshot of starlinkconecta.store taken by the zone census on 2026-09-19

Same data as JSON: /api/zone/domain/starlinkconecta.store. This page is not indexed by search engines and does not link to the site it describes.