magic[.]gidy[.]ai

The domain magic.gidy.ai was registered on February 24, 2026 through GoDaddy.com, LLC and is currently active. DNS analysis shows the authoritative nameservers are ns-402.awsdns-50.com, ns-1905.awsdns-46.co.uk, ns-900.awsdns-48.net, indicating deployment on a major cloud provider's DNS infrastructure. HTTP requests return a 200 status code and the page title "Gidy Magic Box" is observed, matching the intelligence that the site is being used for brand impersonation of Polygon. The site has been blocked by PhishDestroy and appears on one security blocklist. Reputation scoring from Gridinsoft assigns a trust score of 0/100, reflecting a high likelihood of malicious intent. VirusTotal scanning reports a single detection out of 93 scanning engines, confirming that at least one security vendor has identified the domain as suspicious. The overall risk rating is high, and the threat type is classified as brand impersonation. While the exact payload or credential‑harvesting mechanisms have not been publicly disclosed, the combination of a fresh registration, cloud‑based hosting, low reputation score, and detection by security vendors suggests an active phishing campaign targeting Polygon users. Defenders should add magic.gidy.ai to web‑filter deny lists, monitor DNS queries for the associated nameservers, and enforce authentication controls for Polygon services. Users should be warned not to interact with the site and to verify any communications claiming to originate from Polygon through official channels.