polymarkets[.]icu

The domain polymarkets.icu is identified as a credential theft scam and is currently active. This domain impersonates the brand Polymarket, a legitimate prediction market platform, to lure unsuspecting users into providing sensitive information such as login credentials and financial data.

Infrastructure analysis reveals that polymarkets.icu resolves to the IP address 188.114.97.3, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on June 12, 2026. Analysis indicates that the domain is flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. Additionally, the domain appears on 3 security blocklists and is blocked by notable security tools, including PhishDestroy and SEAL. The SSL certificate for the domain is issued by Google Trust Services, which may lend a false sense of security to users.

Given the current active status of the domain and its involvement in credential theft, users are strongly advised to avoid interacting with polymarkets.icu. Security professionals should monitor for any associated malicious activities and consider adding this domain to internal blocklists. Any sensitive information inadvertently shared with this domain should be immediately changed and reported to the relevant security authorities.