gmailcheap.shop
Appeared in the .shop zone on Tuesday, October 6, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is a Portuguese storefront selling bulk Gmail accounts for 'contingência' and Google Ads evasion, paid by Pix with automatic delivery. It is an account-trafficking shop squatting on the Gmail name and Google-coloured logo, not a credential-capture page posing as Google (no password form, no offsite links).
This is a fraudulent Gmail account-selling marketplace, not phishing. The site sells pre-made Gmail accounts with credentials (visible in order history: conta.k7r2@gmail.com, mx.lead2016@gmail.com, etc.) for unauthorized use in fraud, spam, or account creation schemes. While it uses Gmail's name and logo, it is not impersonating Gmail itself to steal credentials from visitors; instead it is a counterfeit-goods/account-trafficking operation selling stolen or illicitly-created Google accounts.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, October 6, 2026
Same data as JSON: /api/zone/domain/gmailcheap.shop. This page is not indexed by search engines and does not link to the site it describes.