Highscore 52 · flagged Friday, August 28, 2026

3dshamazonghui.casa

Appeared in the .casa zone on Friday, August 28, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: amazon
+14
brand plus digits
matched: 3dshamazonghui
+8
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: Dynadot Inc
+8
brand name at a watch-list registrar
matched: Dynadot Inc
+6
identical page on many newborns
matched: 11037 identical pages
+10
Registrar
Dynadot Inc
Nameserver provider
Nameservers
molly.ns.cloudflare.com, roman.ns.cloudflare.com
First-day state
boilerplate page
HTTP status
403
Page title
403 Forbidden
Has a form
no
Brand echoed
amazon

Model opinions

Second opinionlooks like abusetarget: Amazonconfidence 60%· claude-opus-5

Random-string domain embedding 'amazon' on a cheap .casa TLD behind Cloudflare, serving only an nginx 403 and belonging to a cluster of ~11,000 identical pages — the shape of a bulk brand-squat/doorway farm with no legitimate content, not the brand's own registration.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

The domain contains 'amazon' in a typosquat pattern (3dshamazonghui.casa) and is part of a cluster of 11,037 identical 403 pages, indicating a large-scale brand-squat campaign. The 403 error page itself shows no deceptive content, but the domain registration pattern and cluster membership demonstrate the infrastructure is set up for abuse rather than legitimate use.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, August 28, 2026

Screenshot of 3dshamazonghui.casa taken by the zone census on 2026-08-28

Same data as JSON: /api/zone/domain/3dshamazonghui.casa. This page is not indexed by search engines and does not link to the site it describes.