plyplg[.]com

This domain, plyplg.com, operates as a fraudulent cryptocurrency wallet phishing site targeting users of the CSPolygon platform. The site displays a Russian-language page title reading 'CSPolygon — ОФИЦИАЛЬНЫЙ САЙТ,' suggesting an attempt to deceive Russian-speaking users into believing they are accessing an official cryptocurrency service. Visitors may be tricked into entering private wallet credentials, seed phrases, or making fraudulent transactions under the guise of legitimate platform functionality.

Analysis indicates this infrastructure was registered on May 22, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain currently resolves to IP address 188.114.96.3, hosted on Cloudflare's network (AS13335). Security vendor detections on VirusTotal show 3 out of 95 engines flagging the domain as malicious. The SSL certificate, issued by Google Trust Services (WE1), provides encrypted connections that may falsely reassure victims while obscuring the site's fraudulent nature.

If you have visited plyplg.com or entered any sensitive information, immediately cease all interaction with the site. Transfer any remaining cryptocurrency assets to a new, secure wallet using a clean device. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant cryptocurrency platforms and consider filing a complaint with local cybercrime authorities. Do not reuse credentials or seed phrases that may have been exposed.