Mediumscore 38 · flagged Sunday, September 20, 2026

belvbloom.shop

Appeared in the .shop zone on Sunday, September 20, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in page title, not in the name
matched: nationwide
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Nameserver provider
Nameservers
ns1.dyna-ns.net, ns2.dyna-ns.net
First-day state
active website
HTTP status
200
Page title
Buy Best Perfumes for Men and Women Online in India | Belvish.com
Has a form
yes
Brand echoed

Model opinions

Second opinionsuspiciousconfidence 60%· claude-opus-5

Newly registered .shop hosts a discount luxury-perfume storefront whose title and copy brand it as a different site ('Belvish.com'), a domain/brand mismatch typical of cloned dropship or fake-shop kits, reinforced by 70%-off lures, generic testimonials and USD pricing on a supposedly India-shipping store; no impersonation of a named third-party brand, so evidence is not yet decisive for a scam-shop call.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

The domain belvbloom.shop uses a typosquat/brand-squat name mimicking 'Belvish.com' (evident from page title and FAQ references to 'Belvish.com'), presenting a functional e-commerce storefront with a login form that posts to itself with hidden parameters. This is a classic sealed-room phishing infrastructure designed to harvest credentials from users confused by the similar domain name. The page impersonates the legitimate Belvish.com brand to capture account credentials and personal data.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

Same data as JSON: /api/zone/domain/belvbloom.shop. This page is not indexed by search engines and does not link to the site it describes.