Highscore 55 · flagged Thursday, August 27, 2026

httpscvh1d7-znmyshopifycom.store

Appeared in the .store zone on Thursday, August 27, 2026; by the end of that day the census found other. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: shopify
+14
brand plus digits
matched: httpscvh1d7-znmyshopifycom
+8
random-looking name
matched: H=3.89
+5
brand name at a retail registrar
matched: Namify Domains Inc
+8
brand in page title, not in the name
matched: cloudflare
+20
Registrar
Namify Domains Inc
Nameserver provider
Nameservers
getstore.mars.orderbox-dns.com, getstore.venus.orderbox-dns.com
First-day state
other
HTTP status
409
Page title
DNS resolution error | httpscvh1d7-znmyshopifycom.store | Cloudflare
Has a form
no
Brand echoed
shopify

Model opinions

Second opinionlooks like abusetarget: Shopifyconfidence 83%· claude-opus-5

The name encodes a full fake URL 'https://cvh1d7-zn.myshopify.com' as a single label under .store, a deliberate URL-embedding squat of a Shopify merchant subdomain; the site serves only a Cloudflare Error 1001 page (no content to judge), so there is no live deception yet but no plausible legitimate purpose for the name.

First passsuspiciousconfidence 72%· claude-haiku-4-5

The domain name httpscvh1d7-znmyshopifycom.store contains 'shopify' and has DGA-like characteristics (high entropy), suggesting possible brand-squatting or phishing infrastructure setup. However, the page currently shows only a legitimate Cloudflare DNS resolution error (1001) with no deceptive content, login form, or attempt to capture credentials—indicating the infrastructure may not yet be fully deployed for abuse, or the registration itself is the suspicious artifact rather than the current

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, August 27, 2026

Screenshot of httpscvh1d7-znmyshopifycom.store taken by the zone census on 2026-08-27

Same data as JSON: /api/zone/domain/httpscvh1d7-znmyshopifycom.store. This page is not indexed by search engines and does not link to the site it describes.