Highscore 44 · flagged Saturday, September 12, 2026

wayneindustry.shop

Appeared in the .shop zone on Saturday, September 12, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

page asks for credentials
matched: Sign in to your account
+30
login form
matched: has_form+login words
+14
Registrar
Nameserver provider
Nameservers
dns1.namecheaphosting.com, dns2.namecheaphosting.com
First-day state
active website
HTTP status
200
Page title
Bruce Wayne - Login
Has a form
yes
Brand echoed

Model opinions

Second opinionsuspiciousconfidence 58%· claude-opus-5

Page is a self-branded "Bruce Wayne" licence-key management panel ("Manage your keys, resellers, and live server", 2FA, Device Lock/Reset Device) — the classic KeyAuth-style loader/reseller panel used to distribute game cheats or cracked/loader software, not an impersonation of any real brand; the fictional-name branding and shop TLD are odd but there is no deceptive brand use or visible payload, so evidence stops short of a malware/abuse call.

First passlooks like phishingtarget: Bruce Wayne (Batman/DC Comics character used as fake brand identity)confidence 92%· claude-haiku-4-5

The domain wayneindustry.shop hosts a login form titled 'Bruce Wayne - Login' that collects username and password credentials, with the form posting to itself (sealed-room phishing pattern). The page impersonates a fictional company identity ('Bruce Wayne', 'manage keys, resellers, and live server') to deceive visitors into providing credentials. The use of a generic .shop domain combined with a character/brand name and a credential-harvesting form is a classic phishing setup with no legitimate

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, September 12, 2026

Screenshot of wayneindustry.shop taken by the zone census on 2026-09-12

Same data as JSON: /api/zone/domain/wayneindustry.shop. This page is not indexed by search engines and does not link to the site it describes.