# usa-polymarket.com — MALICIOUS

> usa-polymarket.com is engaged in high-risk phishing targeting prediction market users. Stay vigilant and avoid entering sensitive data on this site.

## Summary
PhishDestroy identifies usa-polymarket.com as a high-risk generic phishing domain impersonating Polymarket, a well-known prediction market platform. The domain mimics legitimate branding to deceive users into submitting sensitive credentials. This classification is based on its use in credential theft schemes rather than targeted malware distribution.

Technical analysis reveals usa-polymarket.com was registered on February 21, 2026, and resolves to IP address 104.21.15.149. The domain has been flagged by 11 out of 95 security vendors on VirusTotal and appears on two recognized security blocklists, confirming its malicious status. The page title “Polymarket | The World's Largest Prediction Market” is used to lend credibility and lure victims.

Currently, usa-polymarket.com remains active and continues to pose a significant risk to users attempting to access Polymarket services. PhishDestroy recommends immediate blocking of this domain within organizational networks and heightened user awareness to prevent credential compromise. Continuous monitoring is advised to track changes in infrastructure or threat behavior.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Polymarket | The World's Largest Prediction Market

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 104.21.15.149
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "CRDF", "CyRadar", "ESET", "Fortinet", "Google Safebrowsing", "Lionic", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bb285-116e-75af-baf2-6d667f03c60b.png
- PhishDestroy: https://phishdestroy.io/domain/usa-polymarket.com/
- LLM endpoint: https://phishdestroy.io/domain/usa-polymarket.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/usa-polymarket.com/
Last updated: 2026-03-19