A customer has come across domains that aren't exactly phishing or malware but are websites designed to scam users out of money with bad business practices. We usually lump them together with the P&D category, but a Scam category could allow for more granular filtering of threats.