buycryptowithlinkbystripe.xyz
Appeared in the .xyz zone on Tuesday, September 22, 2026; by the end of that day the census found active website about crypto web3. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Exact-brand domain ('...bystripe.xyz') on a throwaway TLD with free DNS hosts an SEO 'guide' page that trades on Stripe/Link branding purely to funnel visitors to simpleswap.io (the only offsite links, almost certainly affiliate/referral) — a brand-squat affiliate doorway rather than a Stripe property; no credential form, so not phishing, but the name's only purpose is to borrow Stripe's brand.
The domain name and page content heavily reference 'Stripe' and 'Link by Stripe' (Stripe's payment product), but the page is an informational guide about buying crypto using Stripe Link, not a Stripe-branded service itself. The page directs to simpleswap.io for actual transactions and contains no login form or credential capture. This appears to be SEO/affiliate content rather than impersonation, but the prominent use of Stripe branding in the domain and page title without clear affiliation disc
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Tuesday, September 22, 2026
Same data as JSON: /api/zone/domain/buycryptowithlinkbystripe.xyz. This page is not indexed by search engines and does not link to the site it describes.