Highscore 54 · flagged Saturday, September 19, 2026

cactus-aam9.site

Appeared in the .site zone on Saturday, September 19, 2026; by the end of that day the census found active website about gambling & casino. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: usaa
+14
brand plus digits
matched: cactus-aam9
+8
brand name at a retail registrar
matched: NameCheap, Inc.
+8
brand name at a watch-list registrar
matched: NameCheap, Inc.
+6
form on a brand-styled page
matched: has_form
+18
Registrar
NameCheap, Inc.
Nameserver provider
Nameservers
ns1.zomro.net, ns2.zomro.ru, ns3.zomro.com, ns4.zomro.su
First-day state
active website
HTTP status
200
Page title
Кактус казино зеркало: актуальные ссылки для входа на официальный сайт
Has a form
yes
Brand echoed
usaa

Model opinions

Second opinionlooks like abuseconfidence 76%· claude-opus-5

Russian-language 'Cactus casino mirror' gateway offering bonus lures and login/registration links for an offshore casino — a throwaway mirror domain on a cheap .site TLD used to evade gambling blocks, not a licensed operator's own site. The 'usaa' brand hit is a false positive from the substring in 'cactus-aam9', and no organisation is being impersonated.

First passlooks like abuseconfidence 85%· claude-haiku-4-5

This is an unlicensed gambling front operating under the 'Cactus Casino' brand. The domain cactus-aam9.site is a typosquat variant (mirror site) of an actual gambling operation, as evidenced by the page title 'Кактус казино зеркало' (Cactus Casino mirror) and the text describing it as an 'official site' with false claims of Latvian licensing. The form and registration buttons are designed to capture user credentials and payment information for an unlicensed gambling operation, not to impersonate

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Saturday, September 19, 2026

Screenshot of cactus-aam9.site taken by the zone census on 2026-09-19

Same data as JSON: /api/zone/domain/cactus-aam9.site. This page is not indexed by search engines and does not link to the site it describes.