poly[.]earn68[.]com

The domain poly.earn68.com is classified as an elevated risk due to brand impersonation activities targeting the Yearn brand. This domain's activities involve impersonating legitimate Yearn resources, potentially misleading users into compromising interactions. The risk is heightened by the domain's offline status, which suggests potential temporary inactivity rather than permanent mitigation.

Technical analysis reveals that poly.earn68.com was created on December 25, 2025, and registered through Global Domain Group LLC. The domain resolves to the IP address 188.114.97.3. Security measures detected include the use of Cloudflare and HTTP/3 technologies, with an SSL certificate issued by Google Trust Services. VirusTotal reports that 18 out of 95 security vendors currently flag this domain as malicious. Furthermore, it is noted on at least one security blocklist, increasing its threat profile. The connection to the domain currently results in a '522: Connection timed out' error, indicating that the site is offline.

To mitigate risks associated with this brand impersonation threat, users and organizations should ensure robust monitoring of network traffic for any indications of traffic to or from this domain or similar domains. Employing updated security solutions to detect and block access to this domain is advised. Additionally, users should be educated about the risks of brand impersonation and encouraged to verify the authenticity of any communications or websites claiming to represent Yearn. Network defenses should be configured to block access to the IP address 188.114.97.3 and any associated domains. Regularly updating security policies to include newly identified threats is crucial to maintain a secure environment.