polkadot[.]fi

polkadot.fi is currently flagged as a high‑risk generic phishing domain. The zone was created on 10 November 2023 and is registered through Hosting Concepts B.V. d/b/a Registrar.eu. DNS resolution points to 104.16.140.114, an IP owned by Cloudflare, Inc. (AS13335) located in the United States. The service presents a valid TLS certificate issued by Let’s Encrypt (E7), and the server responds with HTTP 200, employing Google Analytics and HTTP/3. Infrastructure analysis shows the domain is listed on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—and appears on a total of four security blocklists. On VirusTotal, four of ninety‑five scanning engines raised detections for the domain, while the Gridinsoft trust score registers at the lowest possible value, 0 / 100. The public page title reads “polkadot.fi is available for purchase – Sedo.com”, indicating the domain is currently parked. The observed evidence confirms the domain’s active malicious status, yet several operational details remain unclear. No nameserver information is available, and the exact payload or phishing kit hosted behind the domain has not been observed. Consequently, the specific techniques employed to harvest credentials or redirect victims cannot be described, and the presence of Google Analytics does not imply user tracking beyond the landing page. Defenders should block 104.16.140.114 and any resolution to polkadot.fi at the network perimeter and within endpoint controls. Adding the domain to local blacklists and ensuring the four blocklist providers are incorporated into detection pipelines will reduce exposure. Continuous monitoring of the registration record and periodic re‑scans with VirusTotal are recommended to capture any changes in the threat posture.