xmarket.cash
Appeared in the .cash zone on Friday, October 16, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The 'X Market' page borrows the X and Grok names it does not belong to, and its header shows a pump.fun token contract address (8QB2...pump CA), which marks it as a memecoin lure. It also takes crypto, PayPal or card payment as a no-account Amazon purchasing proxy, a fake-shop pattern with no way to hold the operator accountable. The Amazon links act as decoys rather than a credential-phishing login.
xmarket.cash presents itself as a legitimate marketplace intermediary that purchases Amazon products on behalf of users and accepts cryptocurrency/PayPal payment, but this is a classic reshipping or payment-interception scam. The site claims to buy from Amazon and ship to users, but collects payment (especially crypto, which is irreversible) without established legitimacy or verifiable business operations; no Amazon affiliation is claimed, only that it 'reads' from Amazon. The forms post to self
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, October 16, 2026
Same data as JSON: /api/zone/domain/xmarket.cash. This page is not indexed by search engines and does not link to the site it describes.