poylimarket[.]com

The domain poylimarket.com was registered on January 09, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently listed as offline. Technical analysis shows that the domain resolves to the IP address 86.54.24.15, which is associated with an autonomous system in Lithuania (AS208885 Noyobzoda Faridduni Saidilhom). The SSL certificate presented is identified as R13, and the Gridinsoft trust score for the host is 0 out of 100, indicating a lack of trust.

VirusTotal reports that 15 of 93 security scanners flag the domain, reinforcing suspicion of malicious activity. The site appears on two public blocklists, specifically PhishDestroy and ScamSniffer, and is categorized as a crypto scam. The page title retrieved from the site is "San Francisco at Philadelphia Predictions & Odds | Polymarket," suggesting an attempt to mimic the legitimate Polymarket prediction market platform.

Although the site is no longer reachable, the combination of a low trust score, multiple vendor detections, blocklist listings, and a brand‑specific page title provides strong evidence that the domain was used for fraudulent purposes, likely to lure victims into cryptocurrency‑related schemes. Defenders should continue to block the domain at network perimeter devices, update threat intelligence feeds with the observed indicators, and monitor for any new domains registered by the same registrar or using similar naming patterns. Additionally, analysts should watch for reuse of the hosting IP or ASN in future campaigns, and consider sharing the indicator set with downstream security operations to improve detection across environments.