pollet3979[.]com

Analysis indicates that the domain pollet3979.com was registered on 21 February 2026 through Dominet (HK) Limited. The site was served over HTTPS using a certificate issued by Google Trust Services under the WE1 label, and the hosting infrastructure is provided by Cloudflare (AS13335) with the IP address 188.114.96.3 located in the United States. DNS resolution points to Cloudflare name servers ashton.ns.cloudflare.com and jule.ns.cloudflare.com. The web server advertised HTTP/3 and enforced HSTS, confirming modern TLS configuration.

The page title returned by the server was "USDT", and the domain was explicitly classified as a wallet/seed phishing operation that impersonates the Binance brand. The observed phishing kit is identified as a Seed Phrase Phishing kit, which typically solicits private seed phrases from victims. VirusTotal analysis recorded detections from 2 of 93 security vendors, and the domain appears on a single security blocklist. PhishDestroy has also flagged the domain as malicious.

The Gridinsoft trust score of 0 out of 100 further reflects the malicious nature of the site. As of the report date, the domain is offline, but the infrastructure footprints—including the Cloudflare IP, the SSL certificate chain, and the registrar information—remain observable and can be used for correlation with other malicious artifacts. Defenders should continue to block the domain and its associated IP address at network perimeter devices, update URL filtering lists, and monitor for any re‑registration or reuse of the same name servers or certificate issuer in future campaigns. Incident response teams should also be aware that victims may be targeted with requests for Binance seed phrases, and any compromised seed phrases should be treated as a complete loss of associated assets.