earn-pol[.]com

This domain, earn-pol.com, is identified as a brand impersonation phishing resource targeting the Polygon blockchain platform. Analysis confirms the domain was designed to mimic Polygon’s official payment infrastructure, presenting itself as a legitimate portal for blockchain transactions. The site is currently offline, but prior activity suggests it was actively used to deceive users into submitting sensitive credentials or wallet information under false pretenses. Infrastructure analysis reveals the domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk registrations. It resolves to the IP address 188.114.97.3 and is protected by Cloudflare, a common tactic to obscure hosting origins and evade takedowns. The domain appears on a single security blocklist, while VirusTotal detection metrics indicate 6 of 95 security vendors flagged it as malicious. Additional indicators include a Gridinsoft trust score of 0/100 and an SSL certificate issued by Google Trust Services, which may lend superficial legitimacy to the fraudulent site. Technologies detected on the domain include AngularJS, jQuery CDN, and HTTP/3, further aligning with modern phishing kit implementations. As of the latest assessment, earn-pol.com has been taken offline, though residual risks may persist if the infrastructure is repurposed. Organizations and users are advised to block the domain and its associated IP at the network level. Security teams should monitor for similar impersonation attempts targeting blockchain platforms, particularly those leveraging Cloudflare or recently registered domains with low detection rates. End-users should verify domain authenticity through official channels before interacting with any blockchain-related payment portals.