xpolymarket[.]com

This domain, xpolymarket.com, is flagged as a brand impersonation threat targeting the Twitter platform. Analysis indicates the site employs a deceptive betting-themed lure, titled 'XPolyMarket - Bet on Twitter Chaos,' to manipulate users into engaging with malicious content. The domain exhibits no direct evidence of a crypto drainer kit but focuses on brand impersonation to exploit trust in the targeted social media platform. Infrastructure analysis reveals the domain was registered on June 06, 2025, through GRANSY S.R.O D/B/A SUBREG.CZ, a registrar frequently associated with high-risk domains. It resolves to the IP address 35.157.26.135, hosted on a content delivery platform known for rapid deployment of malicious sites. Detection metrics show 5 out of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on two independent security blocklists. Gridinsoft assigns a trust score of 0 out of 100, further corroborating its high-risk classification. Technologies detected include HSTS and a hosting environment linked to previous phishing campaigns. As of the latest assessment, xpolymarket.com has been taken offline, likely in response to security vendor interventions and blocklist inclusions. However, the risk remains elevated due to the domain's recent registration and the registrar's history of facilitating malicious infrastructure. Users are advised to treat any prior interaction with the domain as compromised and to monitor for secondary attack vectors, such as credential reuse or follow-up social engineering attempts. Organizations should update internal blocklists and conduct retrospective log analysis to identify potential exposure.