polymarketosterreich[.]at

Analysis of polymarketosterreich.at indicates that the domain is currently active and has been classified as a generic phishing site. The registration record shows the domain was created through Hosting concepts B.V. via Registrar.eu, as documented on the Austrian NIC portal (https://nic.at/registrar/648). DNS resolution points to the IPv4 address 188.114.97.3, and the authoritative name servers are barbara.ns.cloudflare.com and rene.ns.cloudflare.com, confirming that the infrastructure is hosted behind Cloudflare’s network. The domain has been added to a single security blocklist and is explicitly blocked by the PhishDestroy service, demonstrating that at least one anti‑phishing feed is already flagging the host. VirusTotal reports that the domain has been examined by ninety‑five scanning engines, none of which returned a detection; this absence of alerts does not imply safety, only that automated signatures have not yet identified malicious payloads. No public evidence of SSL certificate details, HTTP response codes, Safe Browsing status, OTX mentions, or page‑title metadata is available at the time of writing, leaving those vectors unverified. Defenders should continue to block the domain at network perimeter devices, monitor traffic to the IP address 188.114.97.3, and maintain vigilance for any future detections from additional threat‑intelligence feeds. Ongoing observation of Cloudflare‑hosted DNS changes is recommended, as rapid updates could alter the threat posture without notice.