polymarket-dashboard[.]com

On July 24, 2026 analysts recorded that the domain polymarket-dashboard.com was taken offline after being linked to an Airdrop Scam phishing kit aimed at cryptocurrency users. Registration data shows the domain was created on 6 March 2026 through NameCheap, Inc., and DNS resolution points to the Cloudflare‑owned address 188.114.96.3, ASN 13335, located in the United States. The authoritative nameservers are raquel.ns.cloudflare.com and sean.ns.cloudflare.com, confirming that the infrastructure relies on Cloudflare’s DNS service. No TLS certificate was presented, indicating the site operated without HTTPS protection.

The HTTP response supplied the page title “Polymarket Airdrop,” which aligns with the known kit description for a crypto‑airdrop lure. VirusTotal scans returned four detections out of ninety‑four vendors, and the domain appears on three public blocklists, with explicit blocks from PhishDestroy, MetaMask, and SEAL. These combined indicators suggest a coordinated phishing campaign that exploited the Polymarket brand to deceive victims with a fabricated airdrop offer.

Because the site is currently offline, the exact landing‑page content, credential‑capture forms, or malicious payloads cannot be examined, leaving the detailed attack vector uncertain. defenders should continue to monitor the IP address 188.114.96.3 for any re‑hosting of similar scams, enforce DNS‑level blocks for the domain and its Cloudflare nameservers, and incorporate the identified blocklist entries into web‑filtering solutions. Organizations with personnel exposed to Polymarket communications or cryptocurrency airdrop promotions should issue heightened awareness alerts, advise verification of URLs, discourage entry of private keys on unauthenticated sites, and instruct users to report suspicious links to incident response teams.