Highscore 55 · flagged Monday, October 5, 2026

sonnyangelusaa.shop

Appeared in the .shop zone on Monday, October 5, 2026; by the end of that day the census found boilerplate page. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: usaa
+30
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: NameSilo
+8
brand name at a watch-list registrar
matched: NameSilo
+6
identical page on many newborns
matched: 1412 identical pages
+10
Registrar
NameSilo
Nameserver provider
Nameservers
cloe.ns.cloudflare.com, lex.ns.cloudflare.com
First-day state
boilerplate page
HTTP status
429
Page title
Too many requests
Has a form
no
Brand echoed
usaa

Model opinions

Second opinionlooks like abusetarget: Sonny Angelconfidence 72%· claude-opus-5-5

The 'usaa' match is a false positive: the name is 'sonnyangel' + 'usaa', a typo-padded squat on the Sonny Angel collectible-figure brand. The page is a freshly registered Shopify storefront ('Sonnyangelusa.Shop') using official Sonny Angel product imagery with add-to-cart forms, and it is one of 1,412 identical pages, the shape of a counterfeit or fake-shop brand-squat campaign rather than the brand's own store.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

The domain contains 'usaa' (a major financial services brand) in a .shop domain with a boilerplate e-commerce template selling plush toys and collectibles under the brand 'Sonny Angel'. The page shows a generic Shopify-style store with no login forms, no financial or account content, and no attempt to impersonate USAA itself. This is a brand-squat using USAA's name to gain search visibility for an unrelated retail business, typical of large-scale e-commerce typosquat campaigns (1412 identical pa

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, October 5, 2026

Screenshot of sonnyangelusaa.shop taken by the zone census on 2026-10-05

Same data as JSON: /api/zone/domain/sonnyangelusaa.shop. This page is not indexed by search engines and does not link to the site it describes.