polygon-farm[.]com
“近日中に公開”
polygon-farm.com is a phishing domain targeting MetaMask users. It has been taken offline, but not before being flagged by one out of 91 vendors on VirusTotal. The domain is listed on three public blocklists, including those maintained by MetaMask and PhishDestroy. The site was registered through Squarespace Domains II LLC and hosted on an IP address managed by Squarespace, Inc.
This domain exploits the popularity of MetaMask, a widely used cryptocurrency wallet. The page title "近日中に公開" suggests a lure aimed at Japanese users, indicating a targeted attack strategy. The SSL certificate was issued by Let's Encrypt, a common choice for phishing sites due to its ease of access and no-cost issuance.
Despite being offline now, polygon-farm.com had an abuse score of 41 out of 100, reflecting its malicious intent. The domain's creation date, 2026-05-21, appears incorrect, possibly due to a data entry error or manipulation by the threat actors. The quick action by blocklists, including PhishDestroy, highlights the ongoing efforts to protect users from such scams. The domain's early detection and subsequent takedown demonstrate the effectiveness of collaborative cybersecurity efforts.
Threat Response Pipeline
Public Blocklist Status
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive