Flagged newborn domains, Sunday, August 30, 2026

15 names at tier high or above in .store, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Criticalrobinhoodaiagent.storescore 77echoes robinhood· active website
brand in the namerobinhoodbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.brand name and brand-styled pagerobinhood+1 more

Model opinion: looks like phishing (target: Robinhood), confidence 87%. An opinion, not a finding.

Criticalhsbcollection.storescore 62echoes hsbc· active website
brand in the namehsbcbrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.form on a brand-styled pagehas_form

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Criticalpsbshop.storescore 60· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflixform on a brand-styled pagehas_form

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Criticalthelasallecollection.storescore 60· active website
page impersonates a brandPayPalbrand in page title, not in the namenationwideform on a brand-styled pagehas_form

Model opinion: looks benign, confidence 82%. An opinion, not a finding.

brand in the namegooglelure words (login, verify, secure…)verificationvery long name58brand plus digitsgoogle-site-verificationbraesvyebikyznrd+1 more
Highshopifysha.storescore 55echoes shopify· other
brand in the nameshopifybrand name at a retail registrarNamify Domains Incbrand in page title, not in the namecloudflare

Model opinion: suspicious, confidence 60%. An opinion, not a finding.

Highhttpsadminshopifycomstoregrw0yx-2c.storescore 54echoes shopify· other
brand in the nameshopifyvery long name34brand plus digitshttpsadminshopifycomstoregrw0yx-2cbrand name at a retail registrarNamify Domains Inc+1 more

Model opinion: looks like phishing (target: Shopify), confidence 75%. An opinion, not a finding.

Highshopeeyupoo.storescore 50echoes shopee· no DNS
brand in the nameshopeebrand name behind Cloudflarecloudflare.combrand name at a retail registrarSpaceship, Inc.brand name at a watch-list registrarSpaceship, Inc.
Highzelora-7570shopifycom.storescore 50echoes shopify· other
brand in the nameshopifybrand plus digitszelora-7570shopifycombrand name at a retail registrarNamify Domains Incbrand in page title, not in the namecloudflare

Model opinion: looks benign, confidence 92%. An opinion, not a finding.

Highswiss-mobile.storescore 48echoes tmobile· server error
one-letter brand typomobile≈tmobilebrand name behind Cloudflarecloudflare.combrand name at a retail registrarNameCheap, Inc.brand name at a watch-list registrarNameCheap, Inc.

Model opinion: suspicious (target: T-Mobile), confidence 60%. An opinion, not a finding.

Highadenavault.storescore 42· active website
page impersonates a brandBinancebrand in page title, not in the namepaypal

Model opinion: looks like a scam, confidence 68%. An opinion, not a finding.

Highappgiatot.storescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 72%. An opinion, not a finding.

Highcardnay.storescore 42· active website
page impersonates a brandNetflixbrand in page title, not in the namenetflix

Model opinion: looks like abuse, confidence 62%. An opinion, not a finding.

Highsopsapiwakito.storescore 42· active website
page impersonates a brandMicrosoft 365brand in page title, not in the namexbox
Highvellunekitchenmyshopifycom.storescore 42echoes shopify· other
brand in the nameshopifybrand name at a retail registrarNamify Domains Incbrand in page title, not in the namecloudflare

Same data as JSON: /api/zone/risk?day=2026-08-30&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.