gar-polygon-jekn[.]squarespace[.]com

Analysis of gar-polygon-jekn.squarespace.com was performed on July 25 2026. The domain resolves to the IPv4 address 198.185.159.176, which belongs to AS53831 owned by Squarespace, Inc., located in the United States. DNS resolution uses four nsone.net name servers (dns1.p03.nsone.net through dns4.p03.nsone.net). The site is served over TLS with a DigiCert Global G2 TLS RSA SHA‑256 2020 CA1 certificate, indicating a valid certificate chain issued by DigiCert Inc. The web server returns HTTP 404 for the root path and reports the presence of Squarespace Commerce, Squarespace platform, and HTTP Strict Transport Security (HSTS) headers, confirming the use of Squarespace hosting services. The WHOIS record shows the domain was created on 25 March 2003 and was registered through MarkMonitor, Inc., a registrar frequently used by legitimate enterprises.

Despite the long registration age, the domain is currently listed as offline and has been taken down. Threat intelligence flags the site as a brand impersonation of Polygon and categorises the activity as a crypto‑related scam. The domain appears on a single security blocklist and is blocked by PhishDestroy. VirusTotal analysis reports that 11 of 93 scanned security vendors flagged the domain, providing additional corroboration of malicious intent. Evidence confirms that the domain mimics the Polygon brand, but the exact content of the page title (“BN”) offers no further context.

No public Safe Browsing, OTX, or additional blocklist references were supplied. Consequently, the precise phishing or credential‑harvesting mechanisms remain unknown. Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, monitor any traffic to the associated IP address for anomalous patterns, and consider adding the domain to internal threat feeds.