VirusTotal
13 / 93 engine detections
Відкрити звіт“Connect Wallet - Polymarket”
фішинг WalletConnect: polymarket.verifications.markets — Контент недоступний. Зведення доказів: VirusTotal 13/93 (ChainPatrol, BitDefender, CRDF, Fortinet…
Докладний аналіз PhishDestroy AI нижче залишено англійською, щоб зберегти оригінальний криміналістичний запис.
13 / 93 engine detections
Відкрити звіт100 det.
6/14
Threat flag recorded
Відкрити звітno community references
Відкрити звітprovider verdict: clean
Відкрити звітPage capture
Відкрити звітResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
The domain polymarket.verifications.markets is identified as a high-risk brand impersonation targeting Polymarket. The domain is currently offline, but it poses a significant threat to users who may have encountered it before its takedown.
Infrastructure analysis reveals that the domain was created on February 21, 2026, and is registered through NameCheap, Inc. It resolves to the IP address 67.223.118.65, which is located in the United States and is associated with AS22612 Namecheap, Inc. The domain is protected by a Sectigo Limited SSL certificate, specifically the Sectigo Public Server Authentication CA DV R36. Google Safe Browsing has flagged the domain as a phishing site, and it appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. VirusTotal reports that 13 out of 95 security vendors have flagged this domain as malicious.
Given the current offline status, users should remain vigilant and avoid any links or communications that direct them to this domain. Security teams are advised to monitor for any resurgence of this domain or similar impersonations. Organizations and individuals should update their security configurations to block this domain and educate users about the risks of brand impersonation, particularly in the context of cryptocurrency and wallet connections. Regularly reviewing and updating phishing protection tools and DNS blocklists can help mitigate the risk of future encounters with such threats.
Last checked
For the registrable domain verifications.markets behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
dns1.namecheaphosting.comLocation describes the IP network.
7ad1a33528eec47f0ddff554a32538cb64c162d62c400fbf4cc41fcce0dc9fb5www.polymarket.verifications.marketsSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
www.polymarket.verifications.marketsDomain recordThe original observation time is not recorded for these hostnames.
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
polymarket.verifications.markets
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Невідомо→dns_inactive
dns_nxdomain
Невідомо→dns_inactive
dns_nxdomain
Невідомо→dns_inactive
dns_nxdomain
Невідомо→dns_inactive
dns_nxdomain
Невідомо→dns_inactive
dns_nxdomain
Невідомо→dns_inactive
dns_nxdomain
Невідомо→dns_inactive
dns_nxdomain
Невідомо→dns_inactive
dns_nxdomain
Невідомо→dns_inactive
dns_nxdomain
dns_inactive
dns_nxdomain
14→17
13→14
Threat flag recorded
View source13/93 engine detections
View sourcepolymarket.verifications.markets
View sourcePage captured
View sourceПовідомив 1 учасник спільноти; уперше помічено 27.01.2026
Listed domains receive at least one abuse report; this entry has no retained notification history.
Якщо ви ввели облікові дані облікового запису, особисту чи платіжну інформацію або завантажили файл із цього домену, негайно вживіть заходів. Нижче наведено ресурси, які допоможуть вам повідомити про інцидент і захистити себе.
Виберіть свою країну, щоб отримати офіційні контакти кіберзлочинців або створити проект скарги →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
polymarket.verifications.markets)Навіть якщо ви не знаєте всіх подробиць — все одно подати заяву. Навіть неповна інформація все одно допомагає у розслідуванні.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Аналіз загроз за допомогою збереженого списку блокувань, WHOIS, DNS і загальнодоступних доказів сканування
Сканувати заразДодавайте підозрілі домени до нашої бази даних загроз — захищайте спільноту
ПовідомитиОстанні звіти про фішинг і помічені зміни доступності
ВідстежуватиСлідкуйте за актуальними загрозами або оскаржте цей запис, якщо вважаєте, що це помилкова тривога
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.