polymarket[.]pusd[.]gamma-api[.]com

The domain polymarket.pusd.gamma-api.com is currently active and classified as a high-risk crypto drainer, specifically designed to impersonate Polymarket, a legitimate prediction market platform. This infrastructure targets users by mimicking the official Polymarket branding, likely to execute unauthorized cryptocurrency transactions or harvest credentials under false pretenses. Analysis indicates this is not a generic phishing attempt but a targeted attack leveraging the reputation of a well-known blockchain-based service to deceive victims. Infrastructure analysis reveals the domain was registered through NameSilo, LLC, and resolves to the IP address 206.188.197.249, hosted on AS399629 (BL Networks) in the Netherlands. The domain was created on May 19, 2026, an anomalous date suggesting potential registry manipulation or falsified records. Despite its recent creation, the domain has already been flagged by 1 of 95 security vendors on VirusTotal and appears on three distinct security blocklists. Notably, the domain lacks an SSL certificate, a critical red flag for any site handling financial or sensitive user data. Additional indicators include its presence on curated blocklists maintained by cryptocurrency security entities, further corroborating its malicious intent. Current status confirms the domain remains active and operational, posing an ongoing threat to users. Organizations and individuals are advised to block the domain and its associated IP address at the network level. End users should avoid interacting with the site, particularly those accessing it through links in unsolicited communications or advertisements. Given the domain’s impersonation of a cryptocurrency service, users who may have engaged with it should immediately revoke any connected wallet permissions and monitor their accounts for unauthorized transactions. Security teams are encouraged to treat this domain as a confirmed threat vector and prioritize its inclusion in threat intelligence feeds and automated blocking mechanisms.