Companyfinder.xyz when using 1.1.1.1 dns

Today I made an Ebay purchase. When authenticating to PayPal I was sent to companyfinder.xyz when using 1.1.1.1 as my dns server. This was with Warp one my pc, and with my router using 1.1.1.1 as it’s DNS server.
I scanned with MalwareBytes and offline scan with Windows Defender, neither found a problem.
I told my router to use DHCP to obtain DNS from my ISP, and had no problem connecting to PayPal.

Looking Companyfinder.xyz it appears cloudfare host a site called Companyfinder.club.
nslookup using my router dns

C:\WINDOWS\system32>nslookup Companyfinder.xyz
Server: router.asus.com
Address: 192.168.2.1

Non-authoritative answer:
Name: Companyfinder.xyz
Addresses: 172.67.185.203
104.21.88.160
Looking up 104.21.88.160 result in Part of [AS13335 - Cloudflare, Inc.]

Did you have a question about companyfinder?

No!
The question is why did 1.1.1.1 dns server redirect from paypal.com to Companyfinder.xyz
That should never happen and indicates a corrupt dns server

Both chrome and opera through up a big red flag telling me not to continue, that it was a dangerous site.

COMPANYFINDER.XYZ is able to infect your installed web browsers, including Internet Explorer, Microsoft Edge, Mozilla Firefox, Google Chrome and Safari.

I think you got some kind of adware virus on your PC :wink:

2 Likes

You didn’t read my post.

I believe they did. An internet search reveals that this is the result of adware:

https://duckduckgo.com/?t=ffab&q=companyfinder+xyz&ia=web

1 Like

Let us make this simple.
I turned off 1.1.1.1
Problem went away.

I’m just posting to make whoever is responsible aware that there is a problem
Over and out.