# registration-poly.com — SUSPICIOUS

> registration-poly.com is an active phishing domain posing medium risk. Stay vigilant and avoid interaction to protect your sensitive info.

## Summary
PhishDestroy identifies registration-poly.com as an active phishing domain targeting unsuspecting users. This medium-risk threat aims to deceive victims into divulging personal or financial information, potentially leading to identity theft or fraud. Recognizing such threats is essential to maintaining cybersecurity hygiene.

The domain registration-poly.com was created recently on March 1, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 74.0.32.219 and currently appears on two security blocklists. VirusTotal analysis shows that 3 out of 95 security vendors flag this domain, confirming its suspicious nature. These indicators collectively suggest malicious intent and warrant caution.

Users should avoid clicking on links or opening attachments associated with registration-poly.com. It is advisable to verify the legitimacy of any communications referencing this domain and report suspicious emails to IT or security teams. Maintaining updated security software and awareness of phishing tactics are critical defenses against such evolving threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: $POLY Airdrop — Polymarket

## Domain Intelligence
- Registered: 2026-03-06 15:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 74.0.32.219
- IP Country: GB
- IP City: Slough
- IP Org: AS399486 12651980 CANADA INC.
- Nameservers: ns3.my-ndns.com ns4.my-ndns.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Ermes", "Fortinet", "Gridinsoft"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/39VDm2MH/a3b0354cea0f.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/registration-poly.com
- Wayback Machine: https://web.archive.org/web/https://registration-poly.com
- PhishDestroy: https://phishdestroy.io/domain/registration-poly.com/
- LLM endpoint: https://phishdestroy.io/domain/registration-poly.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/registration-poly.com/
Last updated: 2026-03-19