polymarket-lt[.]lt

This domain, polymarket-lt.lt, is identified as a high-risk crypto drainer. It poses a significant threat to users by attempting to siphon cryptocurrency from their wallets. The site may appear legitimate, but it is designed to trick users into revealing their private keys or other sensitive information, leading to the unauthorized transfer of funds.

Infrastructure analysis reveals that polymarket-lt.lt was created on June 13, 2026. The domain is registered under Cloudflare, Inc., an AS13335 registrar, and is currently hosted on an IP address in the United States (172.67.159.164). The site's SSL certificate is issued by Google Trust Services / WE1. Notably, 3 out of 95 security vendors on VirusTotal have flagged this domain as malicious, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. These indicators strongly suggest that the domain is actively being used for phishing activities.

If a user has visited polymarket-lt.lt, they should take immediate action to protect their assets. First, review all recent transactions in their cryptocurrency wallet to ensure no unauthorized activities have occurred. Next, change any passwords or private keys that may have been compromised during the visit. Finally, consider running a comprehensive security scan on their device to detect and remove any potential malware. Users are advised to report this domain to their security software provider and to avoid any further interaction with the site.