Flagged .shop Domains
101 domains using the .shop extension have been flagged by threat-intelligence feeds. The .shop extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure.
Flagged .shop Domains
60 shownFrequently Asked Questions
Are all .shop websites scams?
No. The .shop extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure. Many legitimate sites use .shop. This page lists only the specific .shop domains flagged by threat-intelligence feeds — not the extension as a whole.
Why do scammers use .shop domains?
Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.
How do I check if a specific .shop site is safe?
Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.
Stop the next phishing attack before you click.
NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.