polymarket-usmarket-it-com[.]pages[.]dev

Analysis of polymarket-usmarket-it-com.pages.dev shows a newly registered domain (created June 08, 2026) that is actively being leveraged for phishing attempts. The domain is provisioned through Cloudflare Pages, indicating a static‑site hosting environment backed by Cloudflare's edge network. VirusTotal reports that 11 of 91 security scanners have flagged the domain, suggesting that a subset of scanning engines have identified malicious characteristics, though the majority have not raised alerts. The domain currently appears on three external blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the consensus among threat‑intelligence providers that the site is being used to harvest credentials or otherwise deceive users.

No public page title, SSL certificate details, or HTTP response codes have been disclosed, and the underlying content has not been crawled in this report; therefore the exact phishing payload or impersonated brand remains unknown. Defenders should treat any traffic to this domain as hostile. Network‑level controls such as DNS sinkholing or firewall deny rules should be applied to prevent inbound or outbound connections.

Endpoint security solutions that reference the current blocklist entries can automatically quarantine attempts to resolve or load the domain. Continuous monitoring of Cloudflare‑hosted assets for rapid registration spikes is advised, as the infrastructure can be repurposed quickly for new campaigns. Organizations should also incorporate the domain into internal URL filtering policies and educate users about unsolicited requests that may originate from newly minted, cloud‑based URLs.