# cashapples.xyz — SUSPICIOUS

> cashapples.xyz shows signs of phishing activity. Though not yet flagged by security tools, caution is advised. Learn more about its status and risks.

## Summary
PhishDestroy identifies cashapples.xyz as a domain exhibiting potential phishing behavior based on its registration patterns and associated infrastructure. While no direct malware or phishing detections have been reported by major security vendors, the domain's recent creation date and registrar choice raise suspicion. The domain is currently under investigation to verify its intent and possible threats.

Technically, cashapples.xyz resolves to IP address 188.114.96.3 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 4, 2026. VirusTotal scans return zero detections, indicating no known malicious payloads at this time. However, the domain's registration details and hosting environment align with common phishing tactics, warranting close monitoring.

Presently, cashapples.xyz remains active with a risk level classified as under investigation. Users and organizations are advised to exercise caution when interacting with this domain or any communications referencing it. Continuous surveillance and additional threat intelligence gathering are recommended to ensure timely identification of any emerging phishing campaigns linked to this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Apple
- Page title: Un instant…

## Domain Intelligence
- Registered: 2026-03-05 09:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["amos.ns.cloudflare.com", "maya.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Forcepoint ThreatSeeker", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbd02-669e-763a-b87e-21a14b9fd738.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/cashapples.xyz
- Wayback Machine: https://web.archive.org/web/https://cashapples.xyz
- PhishDestroy: https://phishdestroy.io/domain/cashapples.xyz/
- LLM endpoint: https://phishdestroy.io/domain/cashapples.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cashapples.xyz/
Last updated: 2026-03-19