cocobayresortpayments.app
Appeared in the .app zone on Sunday, September 13, 2026; by the end of that day the census found active website about gaming. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Brand-new Vercel-hosted .app whose name implies a resort payment portal but whose page is a bare "Ledgerline — Payment Orchestration Console" login: email/password form posting to itself, no offsite links, no company content — the sealed-room credential-capture shape, though no identifiable real organisation is being impersonated ("Ledgerline" is not a known brand), so the evidence stops short of a phishing call.
Domain name (cocobayresortpayments.app) impersonates a resort payment system but the page presents itself as 'Ledgerline — Payment Orchestration Console,' a credential-harvesting login form that posts to itself with no legitimate offsite links, creating a sealed-room phish designed to capture email and password credentials.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, September 13, 2026
Same data as JSON: /api/zone/domain/cocobayresortpayments.app. This page is not indexed by search engines and does not link to the site it describes.