tabs.shopfrontsites.co.uk — claimed by throwaway project

This proves the subdomain takeover finding (ATTACK-REPORT.md, CRITICAL #1). Any Vercel project can claim this hostname while it dangles.