cash.app

Observed 2026-07-12T23:32:55.683Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Guarded by a firewall

Runs onCloudflare

Email byGoogle Workspace

Also usesGoogle Search Console

6 subdomains · tranco_10k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat cash.app actually stands on - every host below is a signed observation

cash.app

A / AAAA

162.159.140.44172.66.0.44

Cloudflareserves the site

ns-810.awsdns-37.netns-1816.awsdns-35.co.ukns-311.awsdns-38.comns-1248.awsdns-28.org

awsdns-37.net + awsdns-35.co.uk + moreanswers its DNS

alt1.aspmx.l.google.comalt4.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.com+1 more

Google Workspacereceives its email

HTTPS probe

bot_blocked Blocked our probe (WAF / bot protection) 403 blocked by cloudflare - bot protection active

HTTP status403

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time6 ms

DNS resolutionNOERROR

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

162.159.140.44
172.66.0.44

MX 5

5alt1.aspmx.l.google.com
10alt4.aspmx.l.google.com
5alt2.aspmx.l.google.com
10alt3.aspmx.l.google.com
1aspmx.l.google.com

TXT 10

ca3-db8a26730bde413aa3d797683265f5eb
google-site-verification=07G-IkNewIx6wqb9UTmJ99rMGaSmpw9LgIMdZgBb-1M
google-site-verification=In1-EBOhQKXl2FTgO-PPbnGM8FY6GU-Bkaxmpz-rebw
google-site-verification=7qlUxJaNxeI7aJINVoFRvBFsIivOkNsl64K81_nLUxY
v=spf1 include:cash.app._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
ca3-b5d66a0264614da88ce224221e7ae3cf
google-site-verification=OH0HcLtO7e6btuzWiOceYIkTtwqRWyyKM5sekVDEbvs
ca3-7bbd19db6811492893529ff4f8114b7e
v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email
v=DKIM1; (detected)

NS 4

ns-810.awsdns-37.net
ns-1816.awsdns-35.co.uk
ns-311.awsdns-38.com
ns-1248.awsdns-28.org

SOA 1

ns-1248.awsdns-28.org ops+dns.squareup.com

TLS Certificates (0)

None.

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for cash.app. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/cash.app">
  <img src="https://domaindrift.io/badge/cash.app.svg"
       width="300" height="64" alt="DomainDrift signed observations for cash.app">
</a>

Ed25519 Receipt

Receipt ID: 4fd97d76-64be-4802-84ea-4da30dad9fd9
Output Hash: 142e75b6cade67eb12cedf6bfd3f1e0284ebf80b89c12470ecc276c16c3e062e
Signature: ed25519:f4548b108f64854b8554f53958b1f34c679fce306dec7ac9efef19e685cf9d080f0790aeb1a9db27a6ad1927cee53d781bc662f70f5988139e8d084be74fde0f
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/cash.app