polygon-swap[.]xyz

The domain polygon-swap.xyz is a confirmed phishing site engaged in brand impersonation targeting users of the Polygon cryptocurrency platform. It presents itself as a legitimate Polygon service to deceive victims into disclosing sensitive information or transferring cryptocurrency, classified as a cryptocurrency scam. As of the latest verification, polygon-swap.xyz has been taken offline and no drainer kit was identified in this campaign.

Technical analysis shows polygon-swap.xyz was flagged by 2 of 95 security vendors on VirusTotal, including Forcepoint ThreatSeeker and Gridinsoft. The domain appears on 1 security blocklist, specifically PhishDestroy. It was created on 2026-02-21 07:01:08, and the observed page title was 'www.www.polygon-swap.xyz'. No registrar, IP address, or SSL issuer information is currently available for this domain.

Users who interacted with polygon-swap.xyz should immediately revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet to prevent unauthorized access. Enable two-factor authentication on all cryptocurrency accounts and monitor for suspicious transactions. Report the phishing domain to the impersonated brand's security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader threat mitigation.