polymarket-bg[.]com

This domain is flagged as a high-risk crypto scam targeting users of the Polymarket platform. Registered on June 13, 2026, through Hosting Concepts B.V., the domain resolves to IP 188.114.96.3 hosted by Cloudflare (AS13335) in the United States. The page title, written in Bulgarian, promotes content about Polymarket and legal status, indicating a localized phishing effort. Infrastructure analysis shows the domain uses Cloudflare nameservers (kyree.ns.cloudflare.com and sue.ns.cloudflare.com) and is protected by an SSL certificate from Google Trust Services. The site is currently active and returns HTTP status 200. Security telemetry confirms the domain is listed on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal shows 5 out of 91 security vendors flagging the domain as malicious. AlienVault OTX includes this domain in one threat intelligence pulse. The Gridinsoft trust score is 0 out of 100, reflecting high distrust. Defenders should block access to this domain at the network and DNS level, monitor for related subdomains or variations, and warn users not to interact with the site or provide any personal or financial information. The exact phishing mechanism has not been fully analysed, but the combination of recent registration, low trust score, and multi-source blocklisting confirms an active threat.