Is cashcats.co a scam? TrustSniffer's high-risk assessment: 10/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at cashcats.co presents itself to visitors as "BlastLine," a single console for sending SMS, placing calls and running HLR lookups, which are checks on the status of mobile numbers. It appears to be a messaging and telephony utility sold as a service. The site's title does not match the "cashcats" name in its domain.

Scam/Impersonation Risk: Contradictory signals are present. The domain is blacklisted by external reputation sources. Several independent security engines classify it as malicious or suspicious, including at least one tier-one security vendor. The detections do not specify a threat category. They are therefore treated as a decisive reputation signal, not as proof of a particular attack type. The domain's name, "cashcats", has no evident connection to the messaging console shown on the homepage. That mismatch between domain and presented brand is consistent with a repurposed or throwaway domain. Bulk SMS and number-validation tooling is also the kind of service routinely abused for spam and smishing campaigns. The evidence does not show that this site is used that way. Two things partly offset the warnings. Browser-behaviour testing found no wallet-drainer activity, hidden forms, clipboard manipulation or content cloaking, and all external requests went to whitelisted destinations. No conflicting legal entities were observed, so there is no identity contradiction. None of this outweighs the blacklist listing on such a new domain. No contact-email anomaly was flagged on the pages analysed. Evidence:

Regulatory Verification Notes: The pages analysed do not clearly disclose a licensed operator, a registered company or a regulatory status, and no third-party regulatory record could be matched to the domain. Registration details are also incomplete, which points to ownership opacity. That is an administrative limitation and not an identity contradiction. This is a verification gap, but on a service that handles phone numbers and messaging traffic, together with the reputation warnings above, it weighs more heavily than it would on a neutral site. No broker-style reputation entry matched the domain. The only external signals are the threat-detection findings described above. Evidence:

What to Verify Next: Any engagement should wait until the operator is independently identified. That means obtaining the legal entity name, registered address and any telecom or messaging licences the operator claims, then confirming them in the relevant public registry rather than relying on text from the site. The relationship between the "cashcats" domain and the "BlastLine" brand should be explained by the operator in writing and checked against an independent source. Official support and contact channels should be confirmed through an independent route and not through links on the site. Security teams should also check whether any internal systems, mail logs or user reports have contacted this domain. Evidence:

Summary Verdict: The site is assessed as high risk, with a critical trust posture. Confirmed blacklist-level detections combine with a very young domain and no verifiable operator identity. The clean behavioural results and valid encryption are real but secondary, and they do not establish legitimacy.

Infrastructure Integrity: The site sits behind the Cloudflare CDN and WAF, and all observed addresses are edge servers. The true origin host could not be seen. Edge-only visibility prevents independent verification of the hosting and can mask rapid content swaps. This is a mitigating factor only, because mainstream CDN protection does not offset the reputation findings. The domain has sparse subdomains for its age, a weak heuristic that adds no confirmed risk by itself.

Closing Assessment: Account creation, login, credential entry and any financial or payment interaction should be avoided. Any visit should be read-only, from an isolated environment, and no files should be downloaded. Reconsider only if the operator's identity is independently verified and the threat detections are cleared.

• Homepage: titled "BlastLine — SMS, calls and HLR in one console", served from the unrelated "cashcats.co" domain.
• Reputation checks: two engines rated the domain malicious and two suspicious, with one tier-one vendor among them, and an external blacklist hit was recorded.
• Domain registration: created 2026-08-18, about 0.19 years (~68 days) old, so the domain has almost no operating history.
• Behavioural sandbox: 3 of 3 runs succeeded, with no cloaking, no wallet interaction, and 6 external POST requests to whitelisted destinations only.
• Domain registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 2026-08-18, expiring 2027-08-18.
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-14. Domain validation confirms control of the domain and says nothing about who operates the business.
• Homepage: product name and domain do not match, and no operator identity was found on the pages analysed.
• Reputation findings: detections remain active and unspecified as to category, so a fresh re-check is warranted before any decision.