cashon[.]pro

PhishDestroy has identified cashon.pro as an active generic phishing domain with an elevated risk level. The domain is currently flagged by security systems, as evidenced by its page title reading 'Suspected phishing site | Cloudflare,' indicating that Cloudflare has already intervened to block access. No specific brand is being impersonated based on available data, but the generic phishing classification suggests the site may be used to harvest credentials or personal information through deceptive means.

Technical analysis reveals that cashon.pro resolves to IP address 188.114.96.3 and was registered through NameCheap, Inc. on February 21, 2026. VirusTotal data shows that 3 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. While the low blocklist count and moderate vendor detections suggest it may not yet be widely recognized, the Cloudflare warning is a strong indicator of malicious intent. The domain's recent creation date further supports the likelihood of it being used for phishing campaigns.

Given the active status and elevated risk, users should avoid visiting cashon.pro under any circumstances. If encountered in emails or messages, do not click any links and report the domain to your security team or email provider. Organizations should block access to this domain and monitor for any related phishing attempts targeting their users. PhishDestroy continues to track this domain and will update the advisory as new intelligence emerges.