# org-register.auction — MALICIOUS

> org-register.auction is flagged for phishing risks. The domain is offline; avoid interactions and ensure your credentials remain secure.

## Summary
PhishDestroy identifies org-register.auction as a medium-risk phishing domain. The domain was created recently on February 21, 2026, and has been associated with generic phishing activity designed to deceive users into divulging sensitive information. Its detection on multiple security blocklists confirms its malicious intent to exploit unsuspecting visitors.

The domain resolves to IP address 104.21.29.107 and was registered through NiceNIC International Group Co., Limited. VirusTotal analysis reveals that 6 out of 95 security vendors flagged this domain, indicating a moderate level of consensus about its suspicious nature. The presence on three separate blocklists further substantiates the domain’s potential threat within phishing ecosystems.

Currently, org-register.auction is offline, reducing the immediate risk to users. However, users are advised to remain vigilant and avoid any interaction with this domain or similar suspicious addresses. Organizations should continue monitoring related infrastructure and update their security filters to block this domain and any associated IP addresses. Regular user education about phishing tactics remains essential to mitigate risks from emerging threats like org-register.auction.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.29.107
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["nadia.ns.cloudflare.com", "kyle.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019baa7f-aca0-76ed-8169-363fd0d9f3f9.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/2cdb0378-54c1-4794-9387-2bb71eb2755c
- PhishDestroy: https://phishdestroy.io/domain/org-register.auction/
- LLM endpoint: https://phishdestroy.io/domain/org-register.auction/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/org-register.auction/
Last updated: 2026-03-19