polymarket-ch[.]ch

This domain, polymarket-ch.ch, is flagged by one security blocklist (PhishDestroy) and is currently under investigation. VirusTotal scanned it with 95 vendors, none of which currently detect it as malicious; however, the absence of detections does not confirm the domain is safe. The domain resolves to IP address 172.67.188.23, which is associated with Cloudflare's infrastructure. Its nameservers are barbara.ns.cloudflare.com and rene.ns.cloudflare.com. The domain remains active as of the report date, July 21, 2026. No specific brand, page title, or scam type has been identified in the available intelligence, meaning the exact nature of the phishing content is not yet analyzed. Defenders should treat this domain with caution due to its appearance on a blocklist and its potential use in phishing campaigns targeting users of the polymarket brand, given the domain name's resemblance. Recommended actions include monitoring the domain for changes in resolution or content, reviewing network logs for any connections to 172.67.188.23, and adding the domain to blocklists if not already covered. Further investigation, such as analyzing the website content or checking for related domains, is advised to confirm the threat level. The lack of vendor detections on VirusTotal does not imply safety, and the domain should be treated as suspicious until proven otherwise.