polymarket-login[.]at

The domain polymarket-login.at has been assessed as a high-risk brand impersonation threat. This type of threat involves the creation of a website or domain that mimics a legitimate brand to deceive users and potentially steal sensitive information.

Infrastructure analysis reveals that the domain was registered through Globaldata-cloud on February 21, 2026. It does not possess an SSL certificate, which is a common indicator of a lack of security and potential malicious intent. The domain resolves to the IP address 185.196.11.70, which is located in Switzerland (CH) and is associated with AS42624 Global-Data System IT Corporation. Analysis on VirusTotal indicates that 22 out of 95 security vendors have flagged this domain as malicious. Additionally, the domain appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. These blocklists are known for identifying and listing potentially harmful domains, further corroborating the high-risk nature of polymarket-login.at.

To mitigate the risks associated with this brand impersonation threat, users are advised to verify the authenticity of any login pages they encounter by comparing the URL with known, legitimate domains. Security teams should update their blocklists to include this domain and IP address, and implement additional layers of authentication, such as multi-factor authentication (MFA), to protect user accounts. Organizations should also educate their employees and users about the signs of brand impersonation and the importance of reporting suspicious activities to security personnel.