polymarket-epoch[.]com

This domain, polymarket-epoch.com, is flagged as a high-risk brand impersonation threat targeting Polymarket, a decentralized prediction market platform. Analysis indicates the site operates as a crypto drainer, designed to deceive users into connecting wallets and executing unauthorized transactions that siphon funds. The page title, 'Rewards · Polymarket — Earn ETH every week,' explicitly mimics Polymarket’s branding to lure victims with promises of rewards, a common tactic in cryptocurrency scams.

Technical indicators confirm the domain’s malicious nature. polymarket-epoch.com was registered on May 8, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with abusive domains. It resolves to the IP address 172.67.198.64, which is hosted on a content delivery network (CDN) often exploited to obfuscate infrastructure. VirusTotal reports 15 out of 95 security vendors detecting the domain as malicious, while it appears on three security blocklists. Additionally, the domain has been flagged in one AlienVault OTX threat intelligence pulse, further corroborating its association with malicious campaigns. Gridinsoft assigns it a trust score of 0/100, and it is actively blocked by wallet security tools and phishing detection systems.

As of the latest assessment, polymarket-epoch.com remains active and poses a significant risk to users. The domain’s infrastructure, combined with its impersonation of a legitimate cryptocurrency platform, suggests it is part of an ongoing campaign to exploit victims. Users are advised to avoid interacting with the domain, disconnect any connected wallets immediately if accessed, and verify all URLs through official channels before engaging with reward or airdrop offers. Organizations should update blocklists to include this domain and monitor for related infrastructure, as similar domains may emerge using comparable naming conventions or hosting patterns.