Highscore 46 · flagged Friday, September 25, 2026

anygetpaid.xyz

Appeared in the .xyz zone on Friday, September 25, 2026; by the end of that day the census found active website about crypto web3. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: xyz
+8
brand in page title, not in the name
matched: instagram
+20
form on a brand-styled page
matched: has_form
+18
Registrar
Spaceship, Inc.
Nameserver provider
Nameservers
launch1.spaceship.net, launch2.spaceship.net
First-day state
active website
HTTP status
200
Page title
Any Get Paid · Creator fees, pointed at whoever you name
Has a form
yes
Brand echoed
—

Model opinions

Second opinionlooks like a scamconfidence 60%· claude-opus-5-5

A freshly registered .xyz pump.fun launchpad that pushes buying its own $ANYPAID token (contract address shown, 'Buy $ANYPAID', 'Connect wallet') and invites launching memecoins named after Elon Musk, MrBeast, Rockstar Games and Valve, with $0.00 fees paid out. That fits a memecoin lure trading on famous names. There is no Instagram impersonation: the only form is a coin search, and the brand match comes from social-icon links.

First passlooks like a scamconfidence 85%· claude-haiku-4-5

The page operates a cryptocurrency token-launching scheme that mimics famous brands (Elon Musk, MrBeast, Epic Games, Rockstar Games) without permission, routing purported 'creator fees' to arbitrary wallets. The form collects wallet connections under the guise of legitimate creator payments, but the infrastructure (anonymous domain, pump.fun integration, no real brand affiliation) and the practice of creating tokens impersonating real people and companies constitute a scam, not phishing—it does

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, September 25, 2026

Screenshot of anygetpaid.xyz taken by the zone census on 2026-09-25

Same data as JSON: /api/zone/domain/anygetpaid.xyz. This page is not indexed by search engines and does not link to the site it describes.