Flagged newborn domains, Sunday, August 30, 2026

30 names at tier medium or above in .store, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalrobinhoodaiagent.storescore 77echoes robinhood· active website
brand in the namerobinhoodbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.brand name and brand-styled pagerobinhood+1 more

Model opinion: looks like phishing (target: Robinhood), confidence 87%. An opinion, not a finding.

Criticalhsbcollection.storescore 62echoes hsbc· active website
brand in the namehsbcbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalpsbshop.storescore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalthelasallecollection.storescore 60· active website
page impersonates a brandPayPalbrand in page title, not in the namenationwideform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

brand in the namegooglelure words (login, verify, secure…)verificationvery long name58brand plus digitsgoogle-site-verificationbraesvyebikyznrd+1 more
Highshopifysha.storescore 55echoes shopify· other
brand in the nameshopifybrand name at a retail registrarNamify Domains Incbrand in page title, not in the namecloudflare

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highhttpsadminshopifycomstoregrw0yx-2c.storescore 54echoes shopify· other
brand in the nameshopifyvery long name34brand plus digitshttpsadminshopifycomstoregrw0yx-2cbrand name at a retail registrarNamify Domains Inc+1 more

Model opinion: looks like phishing (target: Shopify), confidence 75%. An opinion, not a finding.

Highshopeeyupoo.storescore 50echoes shopee· no DNS
brand in the nameshopeebrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highzelora-7570shopifycom.storescore 50echoes shopify· other
brand in the nameshopifybrand plus digitszelora-7570shopifycombrand name at a retail registrarNamify Domains Incbrand in page title, not in the namecloudflare

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highswiss-mobile.storescore 48echoes tmobile· server error
one-letter brand typomobile≈tmobilebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: suspicious (target: T-Mobile), confidence 60%. An opinion, not a finding.

Highadenavault.storescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namepaypal

Model opinion: looks like a scam, confidence 68%. An opinion, not a finding.

Highappgiatot.storescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highcardnay.storescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highsopsapiwakito.storescore 42· active website
page impersonates a brandMicrosoft 365brand in page title, not in the namexbox
Highvellunekitchenmyshopifycom.storescore 42echoes shopify· other
brand in the nameshopifybrand name at a retail registrarNamify Domains Incbrand in page title, not in the namecloudflare
Mediumappto.storescore 38· active website
brand in page title, not in the nametelegramform on a brand-styled pagehas_form
Mediumartlantic.storescore 38· active website
brand in page title, not in the namewordpressform on a brand-styled pagehas_form
Mediumdonniemean.storescore 38· active website
brand in page title, not in the nameshopifyform on a brand-styled pagehas_form
Mediumpersonalizeigostei.storescore 38· redirects elsewhere
brand in page title, not in the namewhatsappform on a brand-styled pagehas_form
Mediumraioxdopedido.storescore 38· active website
brand in page title, not in the nameshopeeform on a brand-styled pagehas_form
Mediumslon14.storescore 38· empty page
brand in page title, not in the namekrakenform on a brand-styled pagehas_form
Mediumzyra1.storescore 38· active website
brand in page title, not in the nameshopifyform on a brand-styled pagehas_form
Mediumanimalcontrol.storescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumbetterbuyguide.storescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumloja-ceravebr.storescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumrendaemcasa.storescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumup2kmekarjaya.storescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumwondereliz.storescore 30· registrar placeholder
brand in page title, not in the namehostingeridentical page on many newborns46 identical pages
Mediumbys-user-store-569448.storescore 26· other
many hyphens3brand in page title, not in the namecloudflare
Mediumlunelleofficial.storescore 26· other
lure words (login, verify, secure…)officialbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-08-30&tier=medium. Screenshots and the model's reasoning are on each domain's evidence page.