cashwave[.]sbs
“Cashwave - Fast Cash, Trusted Service.”
已存储的观测记录
观测到的标题差异
证据摘要
Analysis of cashwave.sbs indicates this domain was actively impersonating Apple to conduct a cash-advance scam. Registered on August 1, 2025, through Global Domain Group LLC, the domain resolved to IP 163.61.188.5, hosted on AS153568 (NEW DHAKA HARDWARE) in the United States. The site was served via nameservers dns1.lytehosting.com through dns4.lytehosting.com without SSL encryption. At the time of assessment, the page title displayed 'Cashwave - Fast Cash, Trusted Service,' directly contradicting Apple’s established branding and service offerings.
Defenders should note that cashwave.sbs appeared on one security blocklist and was flagged by PhishDestroy. Gridinsoft assigned a trust score of 0/100. VirusTotal recorded a single detection from 95 security vendors, though this limited signal should not be interpreted as conclusive proof of malicious activity. The domain was taken offline by July 22, 2026, following detection.
The infrastructure reveals low-cost hosting and no evident protective measures such as SSL, consistent with disposable phishing domains. While the exact content of the site is not analysed, the page title and known brand impersonation suggest it targeted users seeking quick financial services under false Apple affiliation. Defenders are advised to treat this domain as confirmed malicious infrastructure and review logs for connections to 163.61.188.5 or requests to cashwave.sbs. Blocklisting the domain and its associated IP is recommended for proactive defense.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
检测时间线
-
Cloudflare Radar
已存储 Cloudflare Radar 扫描 · 打开扫描
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
SHORTDOT 域名区 · 公开证据
.sbs
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
网站配置分析
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控