aipolvne[.]com

This domain, aipolvne.com, operates as a brand impersonation scam targeting WalletConnect users under the guise of "AI POL MINING." The site is designed to deceive visitors into believing it is a legitimate cryptocurrency mining or wallet service, likely harvesting sensitive credentials such as private keys, seed phrases, or personal information. The use of cryptocurrency-related lures is a common tactic in phishing campaigns, particularly those targeting decentralized finance (DeFi) and wallet users, where stolen credentials can lead to immediate financial loss. Analysis indicates the domain was registered on February 08, 2025, through Metaregistrar BV, a registrar frequently exploited for malicious registrations due to its accessibility. The domain resolves to the IP address 172.67.160.232 and is protected by Cloudflare, a service often abused to conceal hosting infrastructure and evade takedowns. Security vendors on VirusTotal flagged the domain, with 6 out of 95 engines detecting malicious activity. Additional technical indicators include the use of Vue.js for dynamic content delivery, Facebook Pixel for tracking user interactions, and HTTP/3 for performance optimization, all of which are consistent with modern phishing infrastructure. If you visited aipolvne.com or interacted with its content, take immediate action to mitigate potential compromise. Disconnect any wallets linked to the site and revoke permissions for suspicious dApps or smart contracts. Scan your device for malware using updated security tools, as phishing sites may deploy additional payloads. Monitor connected wallets for unauthorized transactions and report any suspicious activity to relevant blockchain explorers or security teams. Consider rotating passwords and enabling multi-factor authentication on all critical accounts. If credentials were entered, assume they are compromised and avoid reusing them across platforms.