paxir.sbs
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of paxir.sbs
The domain paxir.sbs appears to present itself as a Wikipedia-themed webpage. Based on the page title, meta description, and screenshot, it imitates the look and wording of Wikipedia's homepage, including encyclopedia branding and a donation prompt. This suggests the site may be attempting to resemble the well-known Wikimedia project rather than operating as an independent informational website with its own identity.
The domain itself does not appear to match Wikipedia's official web presence, and the use of a low-recognition .sbs domain combined with copied branding raises concerns about possible impersonation. Based on the available content, the site appears to be designed to attract users expecting the legitimate Wikipedia website, potentially to solicit donations, capture credentials, or otherwise mislead visitors.
Safety Assessment for paxir.sbs
Multiple security engines flagged this domain at the time of this scan, with 14 out of 92 detections and several classifications related to phishing or malicious activity. The page content also appears to mimic Wikipedia, while using a domain name that does not correspond to the official Wikimedia domain structure. That kind of visual resemblance may indicate a look-alike website intended to confuse visitors.
Blacklist and threat-database results were mixed at the time of this scan. Major content-malice checks shown here did not report a listing, but one malware-related blacklist did list the domain, and the broader multi-engine detection consensus was notably negative. The domain is also relatively new, has no established traffic ranking in the provided data, and uses branding associated with a major public website without an apparent legitimate connection.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, expiring in December 2026. It appears to be routed through Cloudflare infrastructure, with nameservers on Cloudflare and a server IP in the 104.21.x.x range. DNSSEC was not enabled at the time of this scan.
From a technical-risk perspective, the presence of HTTPS should not be treated as proof of legitimacy, since phishing pages commonly use valid certificates as well. The combination of a young domain, unsigned DNSSEC status, Cloudflare-fronted hosting, and strong phishing-related detection signals may warrant caution.
Share your experience with this website. Was it safe? Did you encounter any issues?