polymarketx[.]com

The domain polymarketx.com is currently active and has been identified as a social media phishing vector. Registration data shows the domain was created on February 21, 2026 through Dynadot LLC, and it resolves to the IP address 54.215.31.113, which is hosted in the United States under ASN 16509 (Amazon.com, Inc.). The site is served by Nginx, returns HTTP 200, and presents a valid Let’s Encrypt certificate (R13). Infrastructure analysis indicates the domain is listed on one security blocklist and is blocked by PhishDestroy. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and four of ninety‑three VirusTotal scanners have flagged the host. The page title returned is simply "polymarketx.com", and the authoritative name servers are ns1.dyna-ns.net and ns2.dyna-ns.net. While the exact phishing payload and victim targeting details have not been disclosed, the classification as social media phishing suggests attempts to harvest credentials via fraudulent social platform links. Defenders should add the IP 54.215.31.113 to deny‑list rules, monitor DNS queries for the domain and its name servers, and ensure that email and web filtering solutions block URLs containing polymarketx.com. Continuous threat‑intel feeds should be consulted for any emerging indicators, and incident response teams should be prepared to investigate any credential‑theft incidents that reference this domain.