# register-pombon.xyz — MALICIOUS

> Register-pombon.xyz hosts phishing scams. Avoid interacting with this domain and never provide personal info. Stay alert and protect your data.

## Summary
PhishDestroy identifies register-pombon.xyz as a medium-risk phishing domain designed to deceive users by impersonating legitimate services, specifically through a misleading 'Pombon | Airdrop' page. Such phishing threats aim to steal sensitive information like login credentials or financial details, posing significant risks to user privacy and security.

The domain was registered on March 2, 2026, via NiceNIC International Group Co., Limited, and resolves to IP address 188.114.96.3. It has appeared on three different security blocklists and is flagged by 6 out of 95 security vendors on VirusTotal, confirming its suspicious nature. Currently, the domain is offline, likely due to takedown efforts, but users should remain cautious of related phishing attempts.

Users are strongly advised not to visit register-pombon.xyz or provide any personal data if encountered. It is essential to verify the legitimacy of websites offering airdrops or promotions and to keep security software updated. Reporting suspicious domains to cybersecurity authorities and using trusted security solutions can help mitigate risks associated with phishing scams like this one.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: Pombon | Airdrop

## Domain Intelligence
- Registered: 2026-03-02 15:00:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ara.ns.cloudflare.com edward.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/5gr0sjJV/62b4f79f9ae7.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/ca694790-032f-4296-a477-6b95df8302d0
- PhishDestroy: https://phishdestroy.io/domain/register-pombon.xyz/
- LLM endpoint: https://phishdestroy.io/domain/register-pombon.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/register-pombon.xyz/
Last updated: 2026-03-19