# Phishing sites impersonating Cash app PhishDestroy has recorded 24 phishing domains impersonating Cash app since 2025-08-28, 2 of them in the last 30 days. The most used registrars are NameSilo and NameCheap; the most common TLDs are .com and .id. Open Cash app only from its official app or a saved bookmark. 24Domains, all time 2Last 30 days 11Online at last check 3Confirmed takedowns ## New domains in the last 90 days Cash app phishing domains detected per day: 8 from 2026-07-25 to 2026-10-22; peak 2. ## How to tell a fake Cash app site Words most often added to the brand in reported domains: elafure, cardingcashout, cashappmakemoney, freegames, moon, pay, uwages, clickbawages, cash, link. - Type the address yourself or use a bookmark; phishing links for Cash app arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Cash app does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Cash app phishing domains The 24 most recently detected domains impersonating Cash app Domain | First detected | Status at last check | Registrar | [cardingcashouts.ru](https://phishdestroy.io/domain/cardingcashouts.ru/) | 2026-10-21 | Online | RU-CENTER-RU | [marketingfx.live](https://phishdestroy.io/domain/marketingfx.live/) | 2026-10-01 | Online | NameCheap | [ser-csh.elafure.com](https://phishdestroy.io/domain/ser-csh.elafure.com/) | 2026-09-17 | Online | Cosmotown | [xs-serv.cas.elafure.com](https://phishdestroy.io/domain/xs-serv.cas.elafure.com/) | 2026-09-17 | Online | Cosmotown | [giftcard-moneypak.com](https://phishdestroy.io/domain/giftcard-moneypak.com/) | 2026-09-04 | Offline | Name.com | [metamaskwallett.blogspot.com](https://phishdestroy.io/domain/metamaskwallett.blogspot.com/) | 2026-08-10 | Online | Google | [glcinv.com](https://phishdestroy.io/domain/glcinv.com/) | 2026-08-10 | Online | NameSilo | [testerrewards.site](https://phishdestroy.io/domain/testerrewards.site/) | 2026-08-04 | Online | NAMECHEAP | [emagrecimento2.vercel.app](https://phishdestroy.io/domain/emagrecimento2.vercel.app/) | 2026-04-08 | Offline | Vercel | [sh2.us](https://phishdestroy.io/domain/sh2.us/) | 2026-03-27 | Online | ENOM | [videomemjob.buzz](https://phishdestroy.io/domain/videomemjob.buzz/) | 2026-03-25 | Offline | NameSilo | [easywgcash.top](https://phishdestroy.io/domain/easywgcash.top/) | 2026-03-25 | Offline | NameSilo | [digitalevidencebureau.com](https://phishdestroy.io/domain/digitalevidencebureau.com/) | 2026-02-27 | Offline | HOSTINGER operations | [codashopbgo.woqbnfkos.web.id](https://phishdestroy.io/domain/codashopbgo.woqbnfkos.web.id/) | 2026-02-26 | Offline | — | [codashophf.wewekab.web.id](https://phishdestroy.io/domain/codashophf.wewekab.web.id/) | 2026-02-26 | Online | — | [codaashoppbg.bakoukm.web.id](https://phishdestroy.io/domain/codaashoppbg.bakoukm.web.id/) | 2026-02-26 | Online | — | [earneuiue-coxkad.xyz](https://phishdestroy.io/domain/earneuiue-coxkad.xyz/) | 2026-02-05 | Taken down | Spaceship | [earnegibe-bjshai.xyz](https://phishdestroy.io/domain/earnegibe-bjshai.xyz/) | 2026-02-05 | Taken down | Spaceship | [app-cash-link.com](https://phishdestroy.io/domain/app-cash-link.com/) | 2026-01-02 | Offline | NameCheap | [clickbawages.buzz](https://phishdestroy.io/domain/clickbawages.buzz/) | 2025-12-07 | Offline | NameSilo | [click9uwages.top](https://phishdestroy.io/domain/click9uwages.top/) | 2025-12-07 | Offline | NameSilo | [moon-pay.blogspot.com](https://phishdestroy.io/domain/moon-pay.blogspot.com/) | 2025-12-02 | Online | MarkMonitor | [cashappmakemoney.freegames.money](https://phishdestroy.io/domain/cashappmakemoney.freegames.money/) | 2025-11-12 | Offline | es-lgr-pl-ngcs-public (ASN: 8560) | [cardingcashout.com](https://phishdestroy.io/domain/cardingcashout.com/) | 2025-08-28 | Taken down | easyDNS Technologies | [All 24 Cash app reports](https://phishdestroy.io/domain/?brand=Cash app) ## Where they are registered and hosted ### Registrars - [NameSilo](https://phishdestroy.io/registrar/namesilo/)4 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)2 - [Spaceship](https://phishdestroy.io/registrar/spaceship/)2 - [Cosmotown](https://phishdestroy.io/registrar/cosmotown/)2 - easyDNS Technologies1 - es-lgr-pl-ngcs-public (ASN: 8560)1 - [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)1 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)9 - [.id](https://phishdestroy.io/tld/id/)3 - [.top](https://phishdestroy.io/tld/top/)2 - [.buzz](https://phishdestroy.io/tld/buzz/)2 - [.xyz](https://phishdestroy.io/tld/xyz/)2 - [.money](https://phishdestroy.io/tld/money/)1 - [.us](https://phishdestroy.io/tld/us/)1 - [.app](https://phishdestroy.io/tld/app/)1 ### Hosting networks - CLOUDFLARENET, US5 - Cloudflare, Inc.3 - CLOUDFLARENET - Cloudflare, Inc., US2 - NEW DHAKA HARDWARE2 - NETWORK-SOLUTIONS-HOSTING, US1 - IONOS-AS IONOS SE, DE1 - GOOGLE, US1 - AMAZON-02, US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Cash app; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/cash-app/