# Phishing domains under .cash

.cash accounts for 143 of the 224,866 domains in the PhishDestroy database (0.06%), with 10 new ones in the last 30 days. The most impersonated brand under .cash is Ethereum. 75 were online at the last check and 20 have a confirmed takedown.

143Reported .cash domains

0.06%Share of PhishDestroy reports

10Last 30 days

20Confirmed takedowns

## Detections per month

.cash phishing domains detected per month: 133 from 2025-11 to 2026-10; peak 54.

## Brands and registrars

### Impersonated brands

- [Ethereum](https://phishdestroy.io/brand/ethereum/)30
- [Ethereum](https://phishdestroy.io/brand/ethereum/)7
- [Bitcoin](https://phishdestroy.io/brand/bitcoin/)6
- [MetaMask](https://phishdestroy.io/brand/metamask/)5
- [Cloudflare](https://phishdestroy.io/brand/cloudflare/)3
- [Solana](https://phishdestroy.io/brand/solana/)3
- [Coingecko](https://phishdestroy.io/brand/coingecko/)2
- [Binance](https://phishdestroy.io/brand/binance/)2

### Registrars

- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)37
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)18
- [NICENIC](https://phishdestroy.io/registrar/nicenic/)18
- [NETIM](https://phishdestroy.io/registrar/netim/)8
- Cloudflare7
- [Spaceship](https://phishdestroy.io/registrar/spaceship/)7
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)6
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)5

## Latest .cash phishing domains

The 30 most recently detected .cash domains
Domain | First detected | Status at last check | Registrar | 
[aurextradeai.cash](https://phishdestroy.io/domain/aurextradeai.cash/) | 2026-10-22 | Online | Dynadot | 
[quizz.cash](https://phishdestroy.io/domain/quizz.cash/) | 2026-10-19 | Online | NameCheap | 
[coingekco.cash](https://phishdestroy.io/domain/coingekco.cash/) | 2026-10-17 | Online | Dynadot | 
[packscan.cash](https://phishdestroy.io/domain/packscan.cash/) | 2026-10-13 | Online | NameCheap | 
[dapp-otcdesks.cash](https://phishdestroy.io/domain/dapp-otcdesks.cash/) | 2026-10-07 | Online | NICENIC | 
[meappay.cash](https://phishdestroy.io/domain/meappay.cash/) | 2026-09-27 | Offline | NameCheap | 
[longbow.cash](https://phishdestroy.io/domain/longbow.cash/) | 2026-09-27 | Online | Name.com | 
[claimed.cash](https://phishdestroy.io/domain/claimed.cash/) | 2026-09-25 | Online | NameCheap | 
[vote-longbow.cash](https://phishdestroy.io/domain/vote-longbow.cash/) | 2026-09-23 | Offline | Spaceship | 
[proposal-longbow.cash](https://phishdestroy.io/domain/proposal-longbow.cash/) | 2026-09-22 | Offline | Spaceship | 
[authorized.cash](https://phishdestroy.io/domain/authorized.cash/) | 2026-09-13 | Online | Spaceship | 
[by-bit.cash](https://phishdestroy.io/domain/by-bit.cash/) | 2026-09-04 | Online | Name.com | 
[ivanka.cash](https://phishdestroy.io/domain/ivanka.cash/) | 2026-08-25 | Online | GoDaddy.com | 
[jupi.cash](https://phishdestroy.io/domain/jupi.cash/) | 2026-08-18 | Unknown | NICENIC | 
[coin-mix.cash](https://phishdestroy.io/domain/coin-mix.cash/) | 2026-08-12 | Offline | PublicDomainRegistry.com | 
[trust-card.cash](https://phishdestroy.io/domain/trust-card.cash/) | 2026-07-31 | Unknown | NICENIC | 
[whir.cash](https://phishdestroy.io/domain/whir.cash/) | 2026-07-28 | Online | NICENIC | 
[claims-zinc.cash](https://phishdestroy.io/domain/claims-zinc.cash/) | 2026-07-27 | Offline | NICENIC | 
[anonex.cash](https://phishdestroy.io/domain/anonex.cash/) | 2026-07-27 | Online | NameCheap | 
[all.cash](https://phishdestroy.io/domain/all.cash/) | 2026-07-27 | Online | GoDaddy.com | 
[lucky-strike.cash](https://phishdestroy.io/domain/lucky-strike.cash/) | 2026-07-27 | Offline | NameCheap | 
[theprivacy.cash](https://phishdestroy.io/domain/theprivacy.cash/) | 2026-07-26 | Offline | NICENIC | 
[claim-zinc.cash](https://phishdestroy.io/domain/claim-zinc.cash/) | 2026-07-25 | Online | NICENIC | 
[xn--ornado-2kb.cash](https://phishdestroy.io/domain/xn--ornado-2kb.cash/) | 2026-06-28 | Online | NICENIC | 
[allocation-zinc.cash](https://phishdestroy.io/domain/allocation-zinc.cash/) | 2026-06-25 | Offline | PublicDomainRegistry.com | 
[barbados-exchange.cash](https://phishdestroy.io/domain/barbados-exchange.cash/) | 2026-06-24 | Online | TLD Registrar Solutions | 
[barbados-exchanger.cash](https://phishdestroy.io/domain/barbados-exchanger.cash/) | 2026-06-24 | Online | TLD Registrar Solutions | 
[bep.cash](https://phishdestroy.io/domain/bep.cash/) | 2026-06-24 | Online | NameCheap | 
[treasury-zinc.cash](https://phishdestroy.io/domain/treasury-zinc.cash/) | 2026-06-21 | Offline | PublicDomainRegistry.com | 
[rosplat.cash](https://phishdestroy.io/domain/rosplat.cash/) | 2026-06-15 | Online | Registrar of Domain Names REG.RU | 

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [EPP status codes](https://phishdestroy.io/glossary/epp-status/)
- [Newly registered domains: phishing risk](https://phishdestroy.io/newly-registered-phishing-domains)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [All TLDs](https://phishdestroy.io/tld/)

Data: PhishDestroy domain-report database, built 2026-10-22. The share is of PhishDestroy reports, not of all .cash registrations; first .cash report 2025-08-09.

Canonical: https://phishdestroy.io/tld/cash/