Cash App

Payments & fintech United Statescash.appRank 138 of the most impersonated
Cert findings · 24 h
4
Cert findings · 7 days
27
25 on phishing hosts · 2 on Spamhaus DROP
Registered lookalikes
31
4 listed by a source or an address list
Official domains
6
verified from Cash App's own sites and records

Certificate findings for Cash App

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Cash App's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 31 findings, grouped by hostname

  1. www.admin.login-cashapp.com US · AS53667 · FranTech Solutions
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    www.admin.login-cashapp.com
    First seen
    2026-11-05 10:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 198.251.89.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 198.251.89.161
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 08:50 UTC to 2027-02-03 08:50 UTC
    Logged 2026-11-05 09:49 UTC in IPng Networks Halloumi2027h1, entry 372,486,958
    SHA-256 b50d24d272272b03790df6ab81b6aadc47a60d7da83e26647d0db6264cf3087d
    Public key SHA-256 9f0e6419a97b546eff6fd39f506b44db23f957567faf64326c5681d010b1ef73
    Brand
    Cash App
    Addresses
    198.251.89.161 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    login-cashapp.com
    Registered
    2026-09-05 · Dynadot Inc
    MX
    Receives mail at login-cashapp.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 06:26 UTC

    Suggest a correction

  2. admin.login-cashapp.com US · AS53667 · FranTech Solutions
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    admin.login-cashapp.com
    First seen
    2026-11-05 10:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 198.251.89.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 198.251.89.161
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-05 08:50 UTC to 2027-02-03 08:50 UTC
    Logged 2026-11-05 09:49 UTC in IPng Networks Halloumi2027h1, entry 372,486,958
    SHA-256 b50d24d272272b03790df6ab81b6aadc47a60d7da83e26647d0db6264cf3087d
    Public key SHA-256 9f0e6419a97b546eff6fd39f506b44db23f957567faf64326c5681d010b1ef73
    Brand
    Cash App
    Addresses
    198.251.89.161 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    login-cashapp.com
    Registered
    2026-09-05 · Dynadot Inc
    MX
    Receives mail at login-cashapp.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 06:26 UTC

    Suggest a correction

  3. www.login-cashapp.com.harbourlinexp.com US · AS53667 · FranTech Solutions
    Phishing hostSame certificateAddress hosted confirmed phishing in the last 48 h · Same certificate as login-cashapp.com, on a phishing host at 198.251.89.161MX presentSPF ~allDMARC policy noneRegistered 21 mo ago
    DetailsHide
    Hostname
    www.login-cashapp.com.harbourlinexp.com
    First seen
    2026-11-05 05:24 UTC
    First published
    2026-11-05 06:25 UTC
    DNS
    Resolves · checked 2026-11-05 06:34 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 198.251.89.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 198.251.89.161
    4. Latest DNS check
    Same certificate
    Same certificate as login-cashapp.com: on a phishing host at 198.251.89.161; a Cash App lookalike
    Hosting-alias name of login-cashapp.com
    Cash App appears in this hostname
    Resolved to 198.251.89.161, an address that hosted confirmed phishing
    Certificate 3ae7612d68cbab67… · 2 domains on it · first seen 2026-11-05 05:24 UTC
    Certificate
    Issued by YR2
    Valid 2026-11-05 04:15 UTC to 2027-02-03 04:15 UTC
    Logged 2026-11-05 05:14 UTC in DigiCert Wyvern2027h1, entry 411,687,675
    SHA-256 3ae7612d68cbab67110e34947a5a7a64be0955f25ccc2a9c02ab6bb18fcd53b6
    Public key SHA-256 fe54b55d1e76c84348145d118b232b9c0b5b705f3e86655822194e2a184637bb
    Brand
    Cash App
    Addresses
    198.251.89.161 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    harbourlinexp.com
    Registered
    2025-02-17 · Instra Corporation Pty Ltd.
    MX
    Receives mail at harbourlinexp.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 06:26 UTC

    Suggest a correction

  4. login-cashapp.com US · AS53667 · FranTech Solutions
    Phishing hostSame certificateAddress hosted confirmed phishing in the last 48 h · Same certificate as www.login-cashapp.com.harbourlinexp.com, on a phishing host at 198.251.89.161MX presentSPF ~allDMARC policy noneRegistered 2 mo ago
    DetailsHide
    Hostname
    login-cashapp.com
    First seen
    2026-11-05 05:24 UTC
    First published
    2026-11-05 06:25 UTC
    DNS
    Resolves · checked 2026-11-05 06:34 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 198.251.89.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 198.251.89.161
    4. Latest DNS check
    Same certificate
    Same certificate as www.login-cashapp.com.harbourlinexp.com: on a phishing host at 198.251.89.161; a Cash App lookalike
    Hosting-alias name of www.login-cashapp.com.harbourlinexp.com
    Cash App appears in this hostname
    Resolved to 198.251.89.161, an address that hosted confirmed phishing
    Certificate 3ae7612d68cbab67… · 2 domains on it · first seen 2026-11-05 05:24 UTC
    Certificate
    Issued by YR2
    Valid 2026-11-05 04:15 UTC to 2027-02-03 04:15 UTC
    Logged 2026-11-05 05:14 UTC in DigiCert Wyvern2027h1, entry 411,687,675
    SHA-256 3ae7612d68cbab67110e34947a5a7a64be0955f25ccc2a9c02ab6bb18fcd53b6
    Public key SHA-256 fe54b55d1e76c84348145d118b232b9c0b5b705f3e86655822194e2a184637bb
    Brand
    Cash App
    Addresses
    198.251.89.161 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    login-cashapp.com
    Registered
    2026-09-05 · Dynadot Inc
    MX
    Receives mail at login-cashapp.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 06:26 UTC

    Suggest a correction

  5. www.cashapp-qn5d5.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.cashapp-qn5d5.icu
    First seen
    2026-11-01 20:06 UTC
    First published
    2026-10-30 00:48 UTC
    DNS
    Resolves · checked 2026-11-05 00:53 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 19:03 UTC to 2027-01-30 19:03 UTC
    Logged 2026-11-01 20:01 UTC in Google ParcelYard2027h1, entry 560,312,996
    SHA-256 aa3df5743227225545f1806c793989c4617656000b5359bd73bb8d5519f61c65
    Public key SHA-256 e63104f7a90f1814d15f3bf6f412b03ae893035efcfa2f9e19b3990a91181043
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-qn5d5.icu
    Registered
    2026-03-04 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-qn5d5.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  6. cashapp-qn5d5.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    cashapp-qn5d5.icu
    First seen
    2026-11-01 20:06 UTC
    First published
    2026-10-30 00:48 UTC
    DNS
    Resolves · checked 2026-11-05 00:53 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 19:03 UTC to 2027-01-30 19:03 UTC
    Logged 2026-11-01 20:01 UTC in Google ParcelYard2027h1, entry 560,312,996
    SHA-256 aa3df5743227225545f1806c793989c4617656000b5359bd73bb8d5519f61c65
    Public key SHA-256 e63104f7a90f1814d15f3bf6f412b03ae893035efcfa2f9e19b3990a91181043
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-qn5d5.icu
    Registered
    2026-03-04 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-qn5d5.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  7. www.cashapp-qlka7.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.cashapp-qlka7.icu
    First seen
    2026-11-01 19:22 UTC
    First published
    2026-10-30 01:51 UTC
    DNS
    Resolves · checked 2026-11-05 02:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 18:18 UTC to 2027-01-30 18:18 UTC
    Logged 2026-11-01 19:17 UTC in Google ParcelYard2027h1, entry 559,794,802
    SHA-256 a94680bf83c688ceaf3528e0c844525ab4117c1d37d59b37080269347e672306
    Public key SHA-256 bcd2bb4197fca00837734268b30d0c811abdeee412e4348705315bfb7332e025
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-qlka7.icu
    Registered
    2026-03-01 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-qlka7.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  8. cashapp-qlka7.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    cashapp-qlka7.icu
    First seen
    2026-11-01 19:21 UTC
    First published
    2026-10-30 01:51 UTC
    DNS
    Resolves · checked 2026-11-05 02:04 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 18:18 UTC to 2027-01-30 18:18 UTC
    Logged 2026-11-01 19:17 UTC in Google ParcelYard2027h1, entry 559,794,802
    SHA-256 a94680bf83c688ceaf3528e0c844525ab4117c1d37d59b37080269347e672306
    Public key SHA-256 bcd2bb4197fca00837734268b30d0c811abdeee412e4348705315bfb7332e025
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-qlka7.icu
    Registered
    2026-03-01 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-qlka7.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  9. www.cashapp-nd4gj.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.cashapp-nd4gj.icu
    First seen
    2026-11-01 16:26 UTC
    First published
    2026-10-30 00:48 UTC
    DNS
    Resolves · checked 2026-11-05 00:53 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 15:24 UTC to 2027-01-30 15:24 UTC
    Logged 2026-11-01 16:22 UTC in Google ParcelYard2027h1, entry 557,792,131
    SHA-256 348e8214ee3bf1ac977566f9dd600196501b2e84fcfa70161e3a60b98a139b69
    Public key SHA-256 fc8a1a80f984f191c130964228ed3dcd1f29cbae9c2a004a9ab08a80ba612d91
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-nd4gj.icu
    Registered
    2026-03-01 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-nd4gj.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  10. cashapp-nd4gj.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    cashapp-nd4gj.icu
    First seen
    2026-11-01 16:26 UTC
    First published
    2026-10-30 00:48 UTC
    DNS
    Resolves · checked 2026-11-05 00:53 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 15:24 UTC to 2027-01-30 15:24 UTC
    Logged 2026-11-01 16:22 UTC in Google ParcelYard2027h1, entry 557,792,131
    SHA-256 348e8214ee3bf1ac977566f9dd600196501b2e84fcfa70161e3a60b98a139b69
    Public key SHA-256 fc8a1a80f984f191c130964228ed3dcd1f29cbae9c2a004a9ab08a80ba612d91
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-nd4gj.icu
    Registered
    2026-03-01 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-nd4gj.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  11. cash-app-au.com CA · AS32489 · Amanah Tech Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    cash-app-au.com
    First seen
    2026-11-01 00:44 UTC
    First published
    2026-11-01 01:02 UTC
    DNS
    Resolves · checked 2026-11-05 01:11 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.86.188.92.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.86.188.92
    4. Latest DNS check
    Certificate
    Issued by Cloudflare TLS Issuing ECC CA 4 · precertificate
    Valid 2026-11-01 00:31 UTC to 2027-01-27 17:35 UTC
    Logged 2026-11-01 00:41 UTC in DigiCert Wyvern2027h1, entry 370,308,775
    SHA-256 6a1f464f94852d07ee4850c980783d79def376b47ee1f9af73c38c2a13cfc04f
    Public key SHA-256 284b61183a5f77cc9622bccf0320a5f4e02bab995e5a51c7e583a0dc3164bbc0
    Brand
    Cash App
    Addresses
    172.86.188.92 · Canada · AS32489 AMANAHA-NEW - Amanah Tech Inc.
    Domain
    cash-app-au.com
    Registered
    2026-06-17 · URL Solutions, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  12. www.cashapp-paymentlosmag.me CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.cashapp-paymentlosmag.me
    First seen
    2026-11-01 00:09 UTC
    First published
    2026-11-01 00:18 UTC
    DNS
    Resolves · checked 2026-11-05 00:26 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 23:07 UTC to 2027-01-29 23:07 UTC
    Logged 2026-11-01 00:05 UTC in Let's Encrypt Sycamore2027h1, entry 879,048,642
    SHA-256 78becb24085b2244c248fcdf929d50f4edb2327786148ccd49c233651e9fe9b1
    Public key SHA-256 45e430b62f2e1b2fe991b63179a54e25c4cf4ab6fa04be58dab31e0066a25b66
    Brand
    Cash App
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    cashapp-paymentlosmag.me
    Registered
    2026-08-10 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  13. cashapp-paymentlosmag.me CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    cashapp-paymentlosmag.me
    First seen
    2026-11-01 00:08 UTC
    First published
    2026-11-01 00:18 UTC
    DNS
    Resolves · checked 2026-11-05 00:26 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 23:07 UTC to 2027-01-29 23:07 UTC
    Logged 2026-11-01 00:05 UTC in Let's Encrypt Sycamore2027h1, entry 879,048,642
    SHA-256 78becb24085b2244c248fcdf929d50f4edb2327786148ccd49c233651e9fe9b1
    Public key SHA-256 45e430b62f2e1b2fe991b63179a54e25c4cf4ab6fa04be58dab31e0066a25b66
    Brand
    Cash App
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    cashapp-paymentlosmag.me
    Registered
    2026-08-10 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  14. www.cashapp-aoscv.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.cashapp-aoscv.icu
    First seen
    2026-10-31 21:26 UTC
    First published
    2026-10-31 21:39 UTC
    DNS
    Resolves · checked 2026-11-04 21:48 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 20:25 UTC to 2027-01-29 20:24 UTC
    Logged 2026-10-31 21:23 UTC in IPng Networks Gouda2027h1, entry 281,029,809
    SHA-256 491dcb89215396161478616feb51130c0e89d41854f5d11a8bb49a5d49a0ed36
    Public key SHA-256 5cb3643a21d143a90fe2a96d16d4461e456475a712dfc5793c35f3525137e9c0
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-aoscv.icu
    Registered
    2026-03-04 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-aoscv.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:35 UTC

    Suggest a correction

  15. cashapp-aoscv.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    cashapp-aoscv.icu
    First seen
    2026-10-31 21:26 UTC
    First published
    2026-10-31 21:39 UTC
    DNS
    Resolves · checked 2026-11-04 21:48 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 20:25 UTC to 2027-01-29 20:24 UTC
    Logged 2026-10-31 21:23 UTC in IPng Networks Gouda2027h1, entry 281,029,809
    SHA-256 491dcb89215396161478616feb51130c0e89d41854f5d11a8bb49a5d49a0ed36
    Public key SHA-256 5cb3643a21d143a90fe2a96d16d4461e456475a712dfc5793c35f3525137e9c0
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-aoscv.icu
    Registered
    2026-03-04 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-aoscv.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:35 UTC

    Suggest a correction

  16. www.cashapp-fbbx0.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.cashapp-fbbx0.icu
    First seen
    2026-10-31 16:06 UTC
    First published
    2026-10-31 16:11 UTC
    DNS
    Resolves · checked 2026-11-04 16:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 15:03 UTC to 2027-01-29 15:03 UTC
    Logged 2026-10-31 16:01 UTC in Geomys Tuscolo2027h1, entry 421,708,874
    SHA-256 5c6094c59e4257d4e3b1ce7b1a6d446a5da2e6937381576cc94c604fae591f02
    Public key SHA-256 43342c3f81febc6434dbac75c9ce66d53e6f6093c8b46c61024e00df7cfa60cb
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-fbbx0.icu
    Registered
    2026-03-02 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-fbbx0.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:35 UTC

    Suggest a correction

  17. cashapp-fbbx0.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    cashapp-fbbx0.icu
    First seen
    2026-10-31 16:06 UTC
    First published
    2026-10-31 16:11 UTC
    DNS
    Resolves · checked 2026-11-04 16:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-31 15:03 UTC to 2027-01-29 15:03 UTC
    Logged 2026-10-31 16:01 UTC in Geomys Tuscolo2027h1, entry 421,708,874
    SHA-256 5c6094c59e4257d4e3b1ce7b1a6d446a5da2e6937381576cc94c604fae591f02
    Public key SHA-256 43342c3f81febc6434dbac75c9ce66d53e6f6093c8b46c61024e00df7cfa60cb
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-fbbx0.icu
    Registered
    2026-03-02 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-fbbx0.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:35 UTC

    Suggest a correction

  18. www.cashapp-qg1ct.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.cashapp-qg1ct.icu
    First seen
    2026-10-31 09:16 UTC
    First published
    2026-10-28 19:20 UTC
    DNS
    Resolves · checked 2026-11-04 19:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 08:16 UTC to 2027-01-29 08:16 UTC
    Logged 2026-10-31 09:14 UTC in Google PlumbersArms2027h1, entry 537,122,899
    SHA-256 0bb5e87c58acbee45fd81ba05197f549fc0e81e12b81dc0f4e5327f4307344b7
    Public key SHA-256 666631275bff3c94f42f71529e4affcdac30fcd9122e4a12545b24cd4b557e0d
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-qg1ct.icu
    Registered
    2026-03-01 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-qg1ct.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:35 UTC

    Suggest a correction

  19. cashapp-qg1ct.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    cashapp-qg1ct.icu
    First seen
    2026-10-31 09:16 UTC
    First published
    2026-10-28 19:20 UTC
    DNS
    Resolves · checked 2026-11-04 19:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 91.199.133.247
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-31 08:16 UTC to 2027-01-29 08:16 UTC
    Logged 2026-10-31 09:14 UTC in Google PlumbersArms2027h1, entry 537,122,899
    SHA-256 0bb5e87c58acbee45fd81ba05197f549fc0e81e12b81dc0f4e5327f4307344b7
    Public key SHA-256 666631275bff3c94f42f71529e4affcdac30fcd9122e4a12545b24cd4b557e0d
    Brand
    Cash App
    Addresses
    91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-qg1ct.icu
    Registered
    2026-03-01 · Gname.com Pte. Ltd.
    MX
    Receives mail at mx.cashapp-qg1ct.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:35 UTC

    Suggest a correction

  20. cashapp.ca CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    cashapp.ca
    First seen
    2026-10-30 21:16 UTC
    First published
    2026-10-30 21:47 UTC
    DNS
    Resolves · checked 2026-11-04 21:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 187.124.243.128.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 187.124.243.128
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-10-30 00:00 UTC to 2027-01-28 23:59 UTC
    Logged 2026-10-30 21:13 UTC in Let's Encrypt Sycamore2027h1, entry 861,602,928
    SHA-256 0abe54a1d4b92d2bd061dd4930e58639e9574e98b3660dfa4ecd181b4a218bb1
    Public key SHA-256 04c75a9d6876b2d146a6768b91dc3cb28ab3b9807ae9b3b81434dd06a19bb1c3
    Brand
    Cash App
    Addresses
    187.124.243.128 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (187.124.243.128): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    cashapp.ca
    Registered
    2021-06-09 · Go Daddy Domains Canada, Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  21. www.cashapp.ca CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    www.cashapp.ca
    First seen
    2026-10-30 20:52 UTC
    First published
    2026-10-30 21:47 UTC
    DNS
    Resolves · checked 2026-11-04 21:58 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 187.124.243.128.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 187.124.243.128
    4. Latest DNS check
    Certificate
    Issued by ZeroSSL ECC DV SSL CA 2 · precertificate
    Valid 2026-10-30 00:00 UTC to 2027-01-28 23:59 UTC
    Logged 2026-10-30 20:48 UTC in Let's Encrypt Sycamore2027h1, entry 861,313,864
    SHA-256 90855ba1b0dbbf7f7208584feffe3dab06d49899731f24a121d344f043b5520a
    Public key SHA-256 a945b30c78e564d9e21900e0145081acfe365152970f292b816e66afeed6ac30
    Brand
    Cash App
    Addresses
    187.124.243.128 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (187.124.243.128): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    cashapp.ca
    Registered
    2021-06-09 · Go Daddy Domains Canada, Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  22. play.cash-app-official-au.com CA · AS32489 · Amanah Tech Inc.
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    play.cash-app-official-au.com
    First seen
    2026-10-30 19:36 UTC
    First published
    2026-10-30 20:43 UTC
    DNS
    Resolves · checked 2026-11-04 20:47 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.86.188.206.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.86.188.206
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-30 18:32 UTC to 2027-01-28 18:32 UTC
    Logged 2026-10-30 19:31 UTC in Google ParcelYard2027h1, entry 527,553,056
    SHA-256 286eff246cd832d4790ac45dc2c756e1f85bb3fb1095d98df24033ffcd954542
    Public key SHA-256 0c132826eb06b0ddd29959d84eb794457c8bee378e32d27090bd3e9bb989ecb4
    Brand
    Cash App
    Addresses
    172.86.188.206 · Canada · AS32489 AMANAHA-NEW - Amanah Tech Inc.
    Domain
    cash-app-official-au.com
    Registered
    2026-05-29 · URL Solutions, Inc.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 22:18 UTC

    Suggest a correction

  23. www.cashapp-5t0wc.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.cashapp-5t0wc.icu
    First seen
    2026-10-30 03:22 UTC
    First published
    2026-10-30 03:51 UTC
    DNS
    Resolves · checked 2026-11-05 04:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 85.121.4.201.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 85.121.4.201
    4. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 85.121.4.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 85.121.4.201
    3. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-30 02:16 UTC to 2027-01-28 02:16 UTC
    Logged 2026-10-30 03:15 UTC in Geomys Tuscolo2027h1, entry 402,460,320
    SHA-256 6e7e09e47288a46aaf8a52fd43582dcbb602f3d45d5ea8e3301606a3f0193b2a
    Public key SHA-256 35fb568d2d15dba0bfb019ca3a7d57dfb93c00364f3593a924df9b179a808401
    Brand
    Cash App
    Addresses
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-5t0wc.icu
    Registered
    2026-03-02 · Gname.com Pte. Ltd.
    MX
    Receives mail at mail.cashapp-5t0wc.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  24. cashapp-5t0wc.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    cashapp-5t0wc.icu
    First seen
    2026-10-30 03:21 UTC
    First published
    2026-10-30 03:51 UTC
    DNS
    Resolves · checked 2026-11-05 04:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 85.121.4.201.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 85.121.4.201
    4. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 85.121.4.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 85.121.4.201
    3. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-30 02:16 UTC to 2027-01-28 02:16 UTC
    Logged 2026-10-30 03:15 UTC in Geomys Tuscolo2027h1, entry 402,460,320
    SHA-256 6e7e09e47288a46aaf8a52fd43582dcbb602f3d45d5ea8e3301606a3f0193b2a
    Public key SHA-256 35fb568d2d15dba0bfb019ca3a7d57dfb93c00364f3593a924df9b179a808401
    Brand
    Cash App
    Addresses
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-5t0wc.icu
    Registered
    2026-03-02 · Gname.com Pte. Ltd.
    MX
    Receives mail at mail.cashapp-5t0wc.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  25. cashapp20.com DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    cashapp20.com
    First seen
    2026-10-30 02:06 UTC
    First published
    2026-10-30 02:55 UTC
    DNS
    Resolves · checked 2026-11-05 03:03 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-30 01:04 UTC to 2027-01-28 01:04 UTC
    Logged 2026-10-30 02:02 UTC in Let's Encrypt Willow2027h1, entry 842,124,551
    SHA-256 5caba6074137afb618f3b6f4767dd7e69520805a1fe055a39624a97eb97da36f
    Public key SHA-256 e75a666dfe6f112e8d889acb870aab868a6f19474c6e65748b1fb3dfd842a249
    Brand
    Cash App
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    cashapp20.com
    Registered
    2026-08-27 · Domain Science Kutatasi Szolgaltato Korlatolt Felelossegu Tarsasag
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:54 UTC

    Suggest a correction

  26. www.cashapp-lzk6i.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    www.cashapp-lzk6i.icu
    First seen
    2026-10-29 00:47 UTC
    First published
    2026-10-29 01:32 UTC
    DNS
    Resolves · checked 2026-11-05 01:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 85.121.4.201.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 85.121.4.201
    4. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 85.121.4.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 85.121.4.201
    3. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-28 23:43 UTC to 2027-01-26 23:43 UTC
    Logged 2026-10-29 00:42 UTC in Let's Encrypt Willow2027h1, entry 823,839,496
    SHA-256 f0d9f4cc327db5a92d37821484b5eb9628f0461a110989c7289c9cc0edf53b02
    Public key SHA-256 59d714492dfebe8349a71b1ab1944d06a8e1d1799c5198c982f5a975aae17496
    Brand
    Cash App
    Addresses
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-lzk6i.icu
    Registered
    2026-03-02 · Gname.com Pte. Ltd.
    MX
    Receives mail at mail.cashapp-lzk6i.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  27. cashapp-lzk6i.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX presentSPF missingDMARC missingRegistered 8 mo ago
    DetailsHide
    Hostname
    cashapp-lzk6i.icu
    First seen
    2026-10-28 23:16 UTC
    First published
    2026-10-28 23:28 UTC
    DNS
    Resolves · checked 2026-11-04 23:41 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 85.121.4.201.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 85.121.4.201
    4. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 85.121.4.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 85.121.4.201
    3. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-28 22:15 UTC to 2027-01-26 22:15 UTC
    Logged 2026-10-28 23:14 UTC in Google ParcelYard2027h1, entry 496,369,826
    SHA-256 3b30a4b5405bb624f137141692979685c435a09644b815e9bb4b6afc03e52f0a
    Public key SHA-256 59d714492dfebe8349a71b1ab1944d06a8e1d1799c5198c982f5a975aae17496
    Brand
    Cash App
    Addresses
    85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Domain
    cashapp-lzk6i.icu
    Registered
    2026-03-02 · Gname.com Pte. Ltd.
    MX
    Receives mail at mail.cashapp-lzk6i.icu
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Cash App when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Payments & fintech

All brands →