intocash[.]online

Analysis of intocash.online, created on March 20, 2026, indicates that the domain is actively being used for phishing despite the absence of public detections in recent VirusTotal scans. The domain is registered through Hostinger Operations, UAB, and delegated to the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. DNS resolution points to the IPv4 address 185.232.14.168, which is the sole host observed for this domain.

The domain has been listed on a single security blocklist and is flagged by the PhishDestroy blocking service, confirming that at least one external mitigation platform has identified it as malicious. VirusTotal has processed the domain with 91 antivirus engines, none of which returned a detection at the time of analysis; this lack of detections does not constitute a safety assurance. No additional telemetry such as Safe Browsing, OTX, or SSL certificate details is available, and the web page content, title, or brand targeting has not been captured, leaving the exact phishing lure undefined.

Given the confirmed registration details, active resolution to a dedicated IP, and inclusion on a blocklist, security teams should proactively deny traffic to intocash.online and its associated IP address, incorporate the domain into internal URL filtering policies, and monitor the host for any future changes in detection status. Continuous re‑evaluation of VirusTotal and other threat intel sources is advised to capture potential emergence of detections as the campaign evolves.