fxbonhcg.shop
Appeared in the .shop zone on Wednesday, September 16, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Random-string .shop domain registered today hosting a four-product generic 'curated marketplace finds' storefront with images/listings lifted from Amazon, Wish, Mercari and Poshmark and cart forms posting to itself — the standard throwaway fake-shop template. The 'Secure PayPal Checkout' banner is a payment claim, not PayPal impersonation, so this is fraud rather than credential phishing.
The page impersonates PayPal by prominently displaying 'Secure PayPal Checkout' as a trust signal and branding feature, while the domain name (fxbonhcg.shop) is a random string with no connection to PayPal. The page contains multiple POST forms with hidden tokens (action, slug, cart_token) that post to itself—a sealed-room credential/payment capture pattern typical of phishing. The combination of brand impersonation in content, fake checkout promises, and form infrastructure designed to capture
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Wednesday, September 16, 2026
Same data as JSON: /api/zone/domain/fxbonhcg.shop. This page is not indexed by search engines and does not link to the site it describes.