polygonscan[.]info

The domain polygonscan.info was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is serviced by Cloudflare nameservers syeef.ns.cloudflare.com and magdalena.ns.cloudflare.com. DNS resolution points to IP address 172.67.139.164, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presents an SSL certificate issued by Google Trust Services under the WE1 designation, indicating a valid TLS handshake despite the underlying malicious intent.

HTTP probing returns a 523 status code and the page title observed during the last live check reads "polygonscan.info | 522: Connection timed out," confirming that the service is currently offline but was previously reachable. VirusTotal analysis recorded seven detections out of ninety‑three security vendors, and the domain is listed on two independent blocklists, PhishDestroy and ScamSniffer, both of which classify it as a crypto‑related brand impersonation targeting Polygon users. The evidence points to a classic crypto‑scam infrastructure that leverages reputable CDN services to obscure origin and to benefit from trusted TLS certificates.

While the exact content of the landing page has not been captured, the combination of brand impersonation, the observed HTTP errors, and the detection history indicate a high likelihood of malicious activity. Defenders should block the domain and its associated IP at network perimeters, monitor for any future re‑activation, and incorporate the domain into threat‑intel feeds to prevent credential harvesting or fraudulent transactions against Polygon stakeholders.