Highscore 46 · flagged Sunday, August 30, 2026

rshopgames.bid

Appeared in the .bid zone on Sunday, August 30, 2026; by the end of that day the census found active website about automotive. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: bid
+8
brand in page title, not in the name
matched: steam
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Cloudflare, Inc.
Nameserver provider
Nameservers
dahlia.ns.cloudflare.com, leif.ns.cloudflare.com
First-day state
active website
HTTP status
200
Page title
A sua loja gamer · Rshop Games
Has a form
yes
Brand echoed

Model opinions

Second opinionlooks like a scamconfidence 62%· claude-opus-5

Brand-new .bid domain hosting a Portuguese "loja gamer" selling heavily discounted Steam ACCOUNTS (R$110 for Red Dead 2, etc.) with WhatsApp as the only operator contact and self-posting cart forms; account resale violates Steam's ToS and is the classic stolen/shared-account fake-shop shape. It uses its own Rshop Games branding (not impersonating Valve), and the banner cites a different domain rshopgames.com.br, so this cheap-TLD copy is more likely a fraudulent storefront than the real merchant

First passlooks like a scamconfidence 85%· claude-haiku-4-5

The domain rshopgames.bid operates an unlicensed Steam account resale shop, presenting itself as a legitimate retailer ('A sua loja gamer') while selling Steam accounts and game keys in violation of Steam's terms of service. The presence of a login form ('Entrar') posting to itself with hidden CSRF tokens, WhatsApp operator contact links, and the .bid TLD (associated with fraud) indicate a fraud scheme designed to capture payment and personal data, rather than legitimate account impersonation of

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, August 30, 2026

Screenshot of rshopgames.bid taken by the zone census on 2026-08-30

Same data as JSON: /api/zone/domain/rshopgames.bid. This page is not indexed by search engines and does not link to the site it describes.