polymarketsport[.]com

Analysis of polymarketsport.com indicates a confirmed generic phishing domain with elevated risk, currently offline as of July 24, 2026. The domain was registered on December 4, 2025, through Squarespace Domains LLC and resolves to IP address 198.185.159.145, hosted on AS53831 (Squarespace, Inc.) in the United States. Nameservers are configured as ns-cloud-b1.googledomains.com, ns-cloud-b2.googledomains.com, and ns-cloud-b3.googledomains.com, suggesting infrastructure leveraging Google Cloud DNS. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious domains. Detection data reveals the domain is flagged by 9 of 95 security vendors on VirusTotal, and it appears on one security blocklist, specifically PhishDestroy.

Gridinsoft assigns a trust score of 0/100, reinforcing its classification as malicious. The HTTP status returned a 200 response prior to takedown, and the page title was recorded as 'Coming Soon,' which is atypical for active phishing pages but may indicate preparatory staging or a placeholder. Technologies detected include Squarespace Commerce and HSTS, which are consistent with Squarespace-hosted domains but do not preclude malicious use. No specific brand target or phishing kit is identified in available data, and the exact content or lure type remains unconfirmed.

Defenders should treat this domain as compromised infrastructure and block it at the network level. Review logs for prior connections to 198.185.159.145 or associated DNS queries, particularly from December 2025 onward. Given the domain's registration age and detection history, it may have been part of a broader campaign; correlation with other Squarespace-registered domains exhibiting similar patterns is recommended. If the domain reactivates, monitor for changes in page content or redirection behavior.