lucky-green-registration[.]com

PhishDestroy identifies lucky-green-registration.com as an active credential theft domain currently under investigation for generic phishing activities. The domain is associated with a high-risk threat vector targeting unsuspecting users through deceptive registration processes. Current evidence suggests the infrastructure is designed to harvest sensitive credentials under the guise of legitimate service registration, posing significant risk to user security.

This domain, registered through Fewmoretaps OU operating as Trustname.com, was created on March 18, 2026, and resolves to IP address 188.114.97.3. As of the latest observation, VirusTotal has not flagged this domain across any of its 95 security vendor detections, indicating a newly active campaign that evades immediate detection mechanisms. The domain lacks established trust scores and has not been listed on major blocklists, leaving it unfiltered in initial threat assessments. Given the absence of detections and the recent domain creation, this represents a rapidly evolving threat with potential for escalated malicious activity.

Given the current status, PhishDestroy advises immediate action to block this domain at the network and endpoint levels. Organizations should update firewall rules, DNS blacklists, and security policies to deny traffic to and from 188.114.97.3 and the associated domain. Users should be warned against accessing this site and similar registrations, particularly those solicited via unsolicited emails or social engineering tactics. Continuous monitoring is strongly recommended due to the domain’s low detection footprint and recent active status. Additionally, reporting this domain to threat intelligence platforms such as VirusTotal, URLVoid, and abuse contacts for Trustname.com and the hosting provider will aid in curbing its spread.