Lumi Domains

Protection and help

How to avoid a domain ban

Clean content, Cloudflare, a separate domain per project

Red warnings and bans mostly hit domains with template landing pages, copied content, and "hot" words in the name. You can lower the risk before launch.

Before purchase the bot checks the name against Google Safe Browsing and scam site lists and warns you if the domain is already flagged. The Blocks line on the domain card shows the registrar status. The check does not clean content: you are responsible for what the website shows.

1. The name

  • No alarming words – the shorter and more neutral the name, the more trust. Do not put brands or "hot" words in it: verification, security, login, bank, google, paypal, coinbase, amazon. Anti-phishing bots ban those almost instantly.
  • Do not repeat a banned domain – example-app2.com after example-app.com was blocked follows it quickly: the link is visible in the content.
  • One domain per project – do not host several projects on one domain and do not reuse a domain that was already blocked. If one gets hit, the rest stay safe. Solid domains cost from $5 for the first year, cheap insurance.
  • A subdomain for traffic – send traffic to promo.example.com and keep an empty or neutral page at the root. Scanners find such pages more slowly.
  • Registrant data – WHOIS shows generated contact details, your data does not go public.

2. Traffic protection

  • Cloudflare – on for Lumi domains from the start: it filters bots and gives basic DDoS protection. During a surge, set DDoS protection → Under Attack, and turn on Bot Fight Mode in the Cloudflare dashboard.
  • Security rules – block datacenter networks and extra countries right in the bot: Security rules.
  • Geo filter – a landing page for one country? Allow only that country: a rule with the expression (ip.src.country ne "US") and the Block action. Fewer scanner visits from other regions.
  • SSL on your server – install a certificate on the server itself instead of relying only on Cloudflare's. This is real end-to-end encryption, and search engines and reputation systems like it better.
  • Cloaking – verification bots see one page, the target audience sees another. There are ready services, for example Adspect: powerful but expensive, around $500–1000 a month. Worth it at large volumes.

3. Landing page design

A template or a copy of someone else's content gets blocked even on a "clean" domain. Make the page unique.

  • Unique code – rename classes and ids to random ones, reorder blocks, obfuscate JS (for example, javascript-obfuscator), make images unique: strip metadata, change size and quality. Then check that everything works.

  • A word from CSS – a simple parser will not read a word glued from two parts:

    css
    .promo::before { content: "Air"; }
.promo::after  { content: "Drop"; }

  • Random colour – a slight hue shift on every load. Add the script to <head>:

    html
    <script src="/random-hue.js"></script>
    js
    const angle = Math.floor(Math.random() * 10) + 1;
document.documentElement.style.setProperty('filter', `hue-rotate(${angle}deg)`);

  • Copyright – someone else's logo or materials without permission are a common reason for complaints and blocks. Remove or rework them.

Already got a red warning: Domain does not work.