polymarketoscars[.]top

On July 23, 2026, analysts observed that the domain polymarketoscars.top remains active and is classified as a high‑risk brand‑impersonation campaign targeting the brand Across. The site resolves to the IPv4 address 92.113.16.80, which is registered to AS47583 (Hostinger International Limited) located in Germany. Registration data indicates the domain was created on October 14, 2025 and is managed by Hosting Concepts B.V. operating under the registrar name Registrar.eu. Both authoritative nameservers are listed as ns1.dns-parking.com and ns2.dns-parking.com, suggesting a parking service that may be leveraged for malicious hosting. The HTTP response code is 200, confirming successful delivery of content, yet no TLS certificate is presented, leaving the connection unencrypted. The page title returned by the server reads "Polymarket Oscars – Best Picture – Make Money Bet," which aligns with the declared scam type of brand impersonation.

VirusTotal has recorded 15 detections out of 95 scanned security vendors, indicating a consensus among multiple scanners that the domain is malicious. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. Independent assessments, such as the Gridinsoft trust score, assign a value of 0 out of 100, reinforcing the perception of extreme risk. No additional threat‑intel sources (e.g., OTX) or safe‑browsing alerts are referenced in the current dataset.

The current evidence confirms that the infrastructure is functional, the hosting environment is public, and the domain is being leveraged to lure victims with a promise of earnings related to an Oscars betting theme. Uncertainties remain regarding the specific payload delivered to visitors, any credential‑phishing forms, or downstream command‑and‑control activity, as these details have not yet been disclosed. Defenders should add 92.113.16.80 to network‑level blocklists, enforce DNS filtering for polymarketoscars.