polymarket-dashboard-efb[.]pages[.]dev

Analysis of the domain polymarket-dashboard-efb.pages.dev indicates it is actively flagged as a phishing threat targeting users of the Polymarket platform. The domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.94, associated with Cloudflare's infrastructure. As of July 29, 2026, five out of ninety-one security vendors on VirusTotal have detected this domain as malicious, signaling a consensus among a subset of threat intelligence providers regarding its risk. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which further corroborates its classification as a phishing resource.

The nameservers, brad.ns.cloudflare.com and eleanor.ns.cloudflare.com, are consistent with Cloudflare's hosting environment, a common choice for both legitimate services and malicious actors due to its accessibility and privacy features. While the domain's structure—incorporating 'polymarket-dashboard'—suggests an intent to deceive users seeking the legitimate Polymarket platform, no direct evidence from the page title, brand target, or scam type explicitly confirms this. The exact content and functionality of the site remain unanalyzed, and no additional details about the phishing kit or specific attack vector are available in the provided intelligence. Defenders should treat this domain as an active threat.

Network-level blocking is recommended based on its current detection status and presence on multiple blocklists. Organizations should monitor for connections to 172.66.47.94 and the domain itself, particularly in environments where Polymarket or similar platforms are used. Given the elevated risk level, users encountering this domain should avoid interaction and report it to their security teams for further investigation. No evidence suggests this domain is safe for access, and its infrastructure aligns with known phishing operational patterns.