Flagged newborn domains, Monday, October 19, 2026

15 names at tier high or above in .store, highest score first.

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

Critical+High+Medium+Low+day:10-22 10-21 10-20 10-19 10-17 10-16 10-15 10-13 10-10 10-09 clear filters

Criticalai-pay.storescore 60echoes alipay· active website

one-letter brand typo “aipay≈alipay”lure words (login, verify, secure…) “pay”brand name behind Cloudflare “cloudflare.com”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Criticalveltrixdigital.storescore 60· active website

page impersonates a brand “PayPal”brand in page title, not in the name “paypal”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Highxn--l1acclak.storescore 56· active website

punycode name “муссон scripts=CYRILLIC”brand in page title, not in the name “telegram”form on a brand-styled page “has_form”

Model opinion: looks benign, confidence 85%. An opinion, not a finding.

Highaccidentedetraficosantander.storescore 55echoes santander· registrar placeholder

brand in the name “santander”form on a brand-styled page “has_form”identical page on many newborns “1163 identical pages”

Model opinion: looks benign, confidence 88%. An opinion, not a finding.

Highhttps-admin-shopify-com-store-productos-exteriores-e-interiores.storescore 55echoes shopify· other

brand in the name “shopify”many hyphens “8”very long name “63”brand name at a retail registrar “Namify Domains Inc”+1 more

Model opinion: suspicious (target: Shopify), confidence 50%. An opinion, not a finding.

Highledger-secure-update.storescore 55echoes ledger· no web server

brand in the name “ledger”lure words (login, verify, secure…) “secure,update”

Highsolutionsskintiktok.storescore 55echoes tiktok· registrar placeholder

brand in the name “tiktok”form on a brand-styled page “has_form”identical page on many newborns “1163 identical pages”

Model opinion: looks like abuse (target: TikTok), confidence 55%. An opinion, not a finding.

Highssott-services.storescore 54· active website

lure words (login, verify, secure…) “service,services”page impersonates a brand “Netflix”brand in page title, not in the name “netflix”

Model opinion: looks like abuse, confidence 60%. An opinion, not a finding.

Highhttps-rw8rth-cs-myshopify-com.storescore 52echoes shopify· other

brand in the name “shopify”many hyphens “4”very long name “29”brand plus digits “https-rw8rth-cs-myshopify-com”+1 more

Model opinion: looks benign, confidence 50%. An opinion, not a finding.

Highzentiquebay.storescore 50echoes ebay· not probed yet

brand in the name “ebay”brand name behind Cloudflare “cloudflare.com”brand name at a retail registrar “Dynadot Inc”brand name at a watch-list registrar “Dynadot Inc”

Highhouseholdamazon.storescore 48echoes amazon· boilerplate page

brand in the name “amazon”brand name at a retail registrar “Tucows Domains Inc.”identical page on many newborns “1384 identical pages”

Model opinion: looks like abuse (target: Amazon), confidence 58%. An opinion, not a finding.

Highvorzelle.storescore 48echoes zelle· boilerplate page

brand in the name “zelle”brand name at a retail registrar “Namify Domains Inc”identical page on many newborns “1384 identical pages”

Model opinion: looks benign, confidence 80%. An opinion, not a finding.

Highlimitedrungames.storescore 44· redirects elsewhere

lure words (login, verify, secure…) “limited”brand in page title, not in the name “playstation”form on a brand-styled page “has_form”

Model opinion: suspicious, confidence 72%. An opinion, not a finding.

Highlightkeyz.storescore 42· active website

page impersonates a brand “PayPal”brand in page title, not in the name “roblox”

Model opinion: looks like abuse, confidence 55%. An opinion, not a finding.

Highluxebeautyessentials.storescore 42· active website

page impersonates a brand “USPS”brand in page title, not in the name “usps”

Model opinion: looks benign, confidence 60%. An opinion, not a finding.

Same data as JSON: /api/zone/risk?day=2026-10-19&tier=high. Screenshots and the model's reasoning are on each domain's evidence page.