paypalexchanger.xyz
Appeared in the .xyz zone on Tuesday, September 22, 2026; by the end of that day the census found active website about travel hotel. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Domain is a PayPal brand-squat (paypalexchanger.xyz on free DNS/.xyz) hosting SEO 'guide' content that trades on the PayPal name to funnel visitors into third-party crypto swap services (SimpleSwap referral); no login form so not credential phishing, but the unauthorised brand use with an affiliate crypto funnel has no legitimate purpose.
The domain impersonates PayPal's brand identity ('Paypal Exchanger') and instructs users to send PayPal funds to an unverified third-party address for cryptocurrency conversion, a classic money-transfer scam pattern. No login form is present, but the page fabricates legitimacy through guides and FAQs to solicit fund transfers to the attacker's PayPal account.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
Same data as JSON: /api/zone/domain/paypalexchanger.xyz. This page is not indexed by search engines and does not link to the site it describes.