polfaucet[.]pages[.]dev

The domain polfaucet.pages.dev was registered on 19 April 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 188.114.97.3 located in Canada. DNS resolution is served by the authoritative nameservers salvador.ns.cloudflare.com and susan.ns.cloudflare.com. The web server presents a valid Let’s Encrypt certificate (issuer E8) and enforces HSTS while offering HTTP/3, indicating modern TLS configuration. An HTTP GET returns status 200 and the page title “PolyFaucet — Earn Free POL Tokens on Polygon Network”, matching the declared scam type of a fake airdrop targeting Polygon (POL) tokens. The site is currently listed on a single blocklist (PhishDestroy) and received a Gridinsoft trust score of 0 / 100. No detections were reported by VirusTotal, but the absence of flags does not constitute a safety assurance. Infrastructure analysis confirms the domain is active and continues to host the fraudulent airdrop page. Uncertainty remains regarding the full payload delivered to visitors, as no additional content has been captured. Defenders should block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and treat any credential or wallet address submissions from this site as compromised. Ongoing observation is recommended until the domain is taken down or further intelligence becomes available.