fundpolymarket[.]xyz

The domain fundpolymarket.xyz was registered on February 21, 2026 through Go Daddy, LLC and resolves to the IPv4 address 24.199.104.115, which is hosted by DigitalOcean (AS14061) in the United States. The site presents an HTTP 200 response and serves content over TLS using a Let’s Encrypt certificate (R13). Technical fingerprinting identifies Ubuntu as the operating system, Nginx as the web server, and front‑end libraries including Vue.js, Chart.js, Tailwind CSS, Unpkg and jsDelivr. The page title "Polymarket Fund - AI Trading" suggests an attempt to reference the Polymarket brand, but no further page content has been disclosed.

Reputation data shows the domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, indicating known malicious use. VirusTotal analysis reports that seven of ninety‑three scanning engines have flagged the domain, reinforcing the suspicion of malicious activity. Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating.

Nameserver configuration uses ns23.domaincontrol.com and ns24.domaincontrol.com, typical of Go Daddy‑managed domains. Given the high risk classification, the active status, and the convergence of multiple detection signals, defenders should block network traffic to the domain and its associated IP, monitor for any outbound connections from internal hosts, and update intrusion detection signatures to include the observed TLS fingerprint and HTTP response characteristics. Continuous re‑evaluation is advised in case additional indicators emerge.