Criticalscore 68 · flagged Thursday, November 12, 2026

tryorganixx.store

Appeared in the .store zone on Thursday, November 12, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

free DNS provider
matched: dnsowl.com
+8
page impersonates a brand
matched: Paypal
+22
brand in page title, not in the name
matched: spectrum
+20
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
ns1.dnsowl.com, ns2.dnsowl.com, ns3.dnsowl.com
First-day state
active website
HTTP status
200
Page title
Organixx Magnesium 7 - Full-Spectrum Daily Multi Magnesium
Has a form
yes
Brand echoed
—

Model opinions

Second opinionsuspicioustarget: Organixxconfidence 50%· claude-opus-5-5

The scorer's PayPal and Spectrum hits are false positives: one is a checkout payment icon, the other comes from 'Full-Spectrum' in the title. The real question is a newly registered .store on NameSilo/dnsowl DNS running a single-product Shopify storefront with Organixx's logo, product and copied PubMed-cited content, linking once to organixx.com. That could be the brand's own 'try' ad funnel or a copycat fake shop taking payments, and the evidence does not yet settle which.

First passsuspicioustarget: Organixxconfidence 72%· claude-haiku-4-5

The domain tryorganixx.store uses a typosquat pattern ('try' + brand name) and displays the Organixx logo and product branding, but the scorer flagged 'PayPal' impersonation and 'Spectrum' brand-in-title. The page shows a functional e-commerce checkout with payment methods and a contact form posting to itself. The evidence suggests either a counterfeit shop or phishing attempt, but lacks clear credential-capture UI or overt PayPal/Spectrum impersonation visible in the screenshot; the PayPal refe

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, November 12, 2026

Screenshot of tryorganixx.store taken by the zone census on 2026-11-12

Same data as JSON: /api/zone/domain/tryorganixx.store. This page is not indexed by search engines and does not link to the site it describes.