MALICIOUS — CRITICAL
Verifica phishing e sicurezza per app.polymarketgrp.com
app[.]
The domain app.polymarketgrp.com has been identified as a high-risk phishing threat and remains active as of July 12, 2026.
- VirusTotal
- 6/91
- Blocklists
- 2 · MetaMask, SEAL
- Disponibilità
- Contenuto non disponibile · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
app.polymarketgrp.com — Contenuto non disponibile (HTTP 502). Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 6/91 (ChainPatrol, alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 72/100. Registrar: Tucows.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
The domain app.polymarketgrp.com has been identified as a high-risk phishing threat and remains active as of July 12, 2026. This domain, which was created on March 12, 2026, has a page title of 'Polymarketclub', suggesting a potential attempt to impersonate a legitimate service to deceive users. It is currently registered through Tucows Domains Inc. and resolves to the IP address 104.21.76.233. The domain has been flagged on four security blocklists, indicating a consensus among security vendors regarding its malicious nature. Notably, Gridinsoft has assigned a trust score of 0 out of 100, reinforcing the high-risk classification of this domain.
Further analysis reveals that the domain has been blocked by various security solutions, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. These blocks are indicative of recognized threats associated with the domain, emphasizing the need for caution when encountering it. VirusTotal reports that 6 out of 95 security vendors have flagged the domain, which contributes to its characterization as a phishing threat. The technologies detected on the site include Highcharts, Vue.js, and Cloudflare, with the use of HTTP/3 being noteworthy but not inherently indicative of malicious intent on its own.
Given the current indicators, defenders should implement measures to block access to this domain across their networks. Users should be advised to remain vigilant against potential phishing attempts that may originate from this domain. It is crucial to monitor for updates from security vendors regarding the status of this domain and enforce security protocols to safeguard against the risks posed by phishing threats.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | app.polymarketgrp.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Registration: polymarketgrp.com
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain polymarketgrp.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 4 identified
Progressive JavaScript framework for building user interfaces.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of app.polymarketgrp.com · checked Jul 12, 2026
Dati e relazioni esterneIndependent lookups and source reports
PD-20260312-77B50B Recipient: domainabuse@tucows.com Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.