polymarket-claim[.]live

This domain, polymarket-claim.live, is identified as a crypto drainer, a type of malicious infrastructure designed to automatically siphon cryptocurrency from connected digital wallets. Unlike traditional phishing sites that harvest credentials, crypto drainers execute unauthorized transactions in real-time, often exploiting wallet permissions granted by users under false pretenses. The site impersonates legitimate cryptocurrency platforms, leveraging trusted branding to deceive visitors into approving malicious smart contracts or signing transactions that transfer assets to attacker-controlled addresses. Given the irreversible nature of blockchain transactions, victims face permanent financial loss with no recourse for recovery. Analysis indicates polymarket-claim.live was registered on March 18, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. The domain resolves to IP address 104.21.12.116 and is proxied through Cloudflare, a common tactic to obscure hosting origins and evade takedowns. Security vendors on VirusTotal flagged the domain as malicious, with 9 out of 95 engines detecting it as a threat. Additional indicators include its presence on three security blocklists and active blocking by wallet security tools. The page title, 'Just a moment...', is consistent with Cloudflare interstitial pages, often used to filter or delay access while masking malicious intent. Infrastructure analysis reveals the use of HTTP/3 and Cloudflare Browser Insights, further suggesting an attempt to mimic legitimate web properties. Individuals who visited polymarket-claim.live or interacted with its content should assume their wallet may be compromised. Immediately revoke all active smart contract approvals and token allowances using a wallet security tool or blockchain explorer. Disconnect the wallet from any decentralized applications (dApps) and transfer remaining assets to a new, secure wallet address. Monitor transaction history for unauthorized activity and report the incident to relevant blockchain security teams. If credentials or private keys were entered, consider the wallet fully compromised and cease all use. Enable enhanced security measures, such as hardware wallet integration and transaction simulation tools, to prevent future exploitation. Given the domain's elevated risk level and offline status, remain vigilant for similar threats impersonating cryptocurrency platforms.