Highscore 50 · flagged Tuesday, October 27, 2026

play1v1.click

Appeared in the .click zone on Tuesday, October 27, 2026; by the end of that day the census found active website about gaming. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

TLD with a high abuse rate
matched: click
+8
page impersonates a brand
matched: PayPal
+22
brand in page title, not in the name
matched: paypal
+20
Registrar
Amazon Registrar, Inc.
Nameserver provider
Nameservers
ns-1200.awsdns-22.org, ns-1955.awsdns-52.co.uk, ns-480.awsdns-60.com, ns-828.awsdns-39.net
First-day state
active website
HTTP status
200
Page title
Play Games for Real Money - 1v1 & Team Matches | FC26, CoD, FIFA, NBA 2K, Rocket League | MatchupSelect
Has a form
no
Brand echoed
—

Model opinions

Second opinionlooks benignconfidence 66%· claude-opus-5-5

The page is a self-branded skill-wagering esports site ('MatchupSelect', 1v1 FC26/CoD/NBA 2K matches for real money). It has no form, links to its own Instagram and Discord, and links to ico.org.uk, which suggests UK data-protection registration; the PayPal signal is most likely a payment-method mention, not impersonation. Real-money gaming on a fresh .click domain warrants some caution, but nothing shown points to a phish or a gambling front.

First passlooks like a scamconfidence 85%· claude-haiku-4-5

The page is a gaming/esports wagering site (MatchupSelect) offering real-money matches on FIFA, CoD, and other titles, with no impersonation of PayPal or any other brand despite the scorer flag. The 'brand-impersonation' signal appears to be a false positive triggered by mention of PayPal as a payment method. This is an unlicensed gambling front masquerading as a legitimate gaming platform, not a credential-theft phish.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Tuesday, October 27, 2026

Screenshot of play1v1.click taken by the zone census on 2026-10-27

Same data as JSON: /api/zone/domain/play1v1.click. This page is not indexed by search engines and does not link to the site it describes.