Scam Detective
Domain

polygon.blockscout.com

First seen May 25, 2026

Suspicious
  • No SSL certificate
  • WHOIS registration hidden
  • 1 community report from users

Details

Registrar
Cloudflare, Inc.
Registration Date
6/10/2010
First Seen
5/25/2026

Related Domains

No known connections to other entities yet.

Community Reports

Need help: Magic AuthUserRefreshToken revoked + abnormal position closures + funds bridged out I am posting this because my case looks very similar to the December 2025 Polymarket account-drain reports. I did not click phishing links, did not share my private key or seed phrase, and did not authorize the trades or outgoing transfer. My Polymarket/Magic login now fails with: AuthUserRefreshToken is revoked Several of my positions were abnormally sold/closed around: 2026-05-17 20:58:53 - 20:59:05 UTC+8 I did not perform these sells. After that, 4871.119293 pUSD/USDC.e left my Polymarket proxy wallet and was bridged through Relay to Solana. Polymarket proxy wallet: 0x9ed7e82a3667f23887a3995e140d2a8601effd36 Key outgoing tx: [https://polygon.blockscout.com/tx/0x1e61d5da0a4edd739db7f70efe09c835a8b3304c09e3ccf3e4ff62b9f89054c4](https://polygon.blockscout.com/tx/0x1e61d5da0a4edd739db7f70efe09c835a8b3304c09e3ccf3e4ff62b9f89054c4) Relay tx: [https://polygon.blockscout.com/tx/0x75a99b2b652a07e14f1cbbfab67f9c0a889206ca1bce8d529fc6f46f20680f76](https://polygon.blockscout.com/tx/0x75a99b2b652a07e14f1cbbfab67f9c0a889206ca1bce8d529fc6f46f20680f76) Relay request: [https://relay.link/transaction/0x0cb448def1f8a41d0aecb78cfd2870987c0c3f2696b530e17fe6c26a6e9a7404](https://relay.link/transaction/0x0cb448def1f8a41d0aecb78cfd2870987c0c3f2696b530e17fe6c26a6e9a7404) Final Solana recipient: GZxiVHg1JM6gCWRG7FwhaD6gPYpcLhiJ21s4ga7Ynfus Relay Support confirmed that the transaction was verified, all logs are preserved, and attacker addresses have been flagged across their systems. Relay also confirmed: \- Referrer: funxyz|su4gnoxz14 \- App fee recipient: 0xdfd877679e95c1276c85801805b2c2ab8f4f4cf6 I have contacted Polymarket Support, Relay Support, Discord support, and I am preparing IC3/Chainabuse reports. Has anyone else seen the same pattern recently: Magic/AuthUserRefreshToken revoked, abnormal position closures, and funds bridged out through Relay?

34 days ago1 upvote

Share Your Experience

What's Your Exposure?

Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.