MalwareTips: 26-day-old velnoraus.shop copycat store rated Dangerous (14/100)

What happened

MalwareTips published an investigation today calling velnoraus.shop a fake store built on a copied catalog. It says the site's product photos, descriptions and branding are taken from real brands and stores, none of which runs it, and that such stores are promoted through sponsored Facebook, Instagram and TikTok ads, often with store-closure, anniversary or warehouse-clearance stories and discounts of around 70% across the catalog. According to MalwareTips, what arrives, if anything, is usually a cheap copy that looks nothing like the photos. MalwareTips found that the domain was registered on October 16, 2026, only 26 days before its review, and its URL scanner rates it Dangerous (14/100). Advice from MalwareTips: don't buy from velnoraus.shop; anyone who paid should contact their bank or card issuer promptly.

How the scam works

MalwareTips describes these sites as part of a scam network of near-identical dropshipping stores: new domains, copied layouts, and social-media ads that push a sale. Two of today's reports, swiftlifty.com and giveareport.com, are described as running on the esashop.top platform; feroota.com and movoivtia.com are described as running on ojtlnsa.com. A separate group of copycat jewellery and fashion shops, including velnoraus.shop, rdln.shop, lianiaura.shop, makiastore.shop, funeiajewelry.com and dsjewelrynew.com, is described as using catalogues and photos taken from real brands, which are not involved.

Do not pay a newly registered shop you reached from a sponsored ad, especially when the discount is huge and the contact details are thin. If you already paid, contact your bank or card issuer promptly and keep the ad, the checkout page and any chat records.

Source

MalwareTips investigation, 11 November 2026: https://malwaretips.com/blogs/velnoraus-shop-exposed-shopping-scam-or-legit-key-findings/