systemmainnet[.]com

Analysis of the domain systemmainnet.com confirms its classification as a high-risk phishing site targeting users of Polkadot-related services. The domain, registered on February 21, 2026, through Key-Systems GmbH, currently resolves to the IP address 188.114.97.3, which is hosted on Cloudflare's infrastructure (AS13335) in the United States. The site's SSL certificate is issued by Let's Encrypt (serial number E8), a common choice for both legitimate and malicious domains. Infrastructure analysis reveals the use of Caddy as a web server, jsDelivr for content delivery, and Cloudflare Browser Insights for performance monitoring, alongside HTTP/3 protocol support.

The page title 'Nur einen Moment…' suggests a German-language loading or redirection page, though the exact nature of the phishing content remains unconfirmed due to the domain's current offline status. Detection data indicates that the domain has been flagged by at least four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, which explicitly associate it with phishing activity targeting Polkadot users. VirusTotal reports that 13 out of 93 security vendors have detected the domain as malicious, further corroborating its fraudulent intent. The domain's nameservers, ns1.suspendedpage.com and ns2.suspendedpage.com, are consistent with infrastructure often used to host or redirect malicious content.

Gridinsoft's trust score of 0/100 reflects the domain's complete lack of legitimacy. Defenders are advised to maintain blocklist entries for this domain and monitor any re-emergence of the IP or associated infrastructure. Given the domain's offline status as of July 24, 2026, further analysis of its content is not possible, but existing detection data provides sufficient evidence for its classification as a confirmed phishing site.