polymarket.com

HTML metadata

Title

Polymarket | The World's Largest Prediction Market™

Description

Polymarket is the world's largest prediction market, allowing you to stay informed and profit from your knowledge by trading on future events across various topics.

Language

en

Canonical

https://polymarket.com

Translations

bn
de
en
es
fr
hi
id
it
ja
ko
pl
pt
ru
th
tl
uk
vi
zh
zh-hant

Open Graph

url: https://polymarket.com
title: Polymarket | The World's Largest Prediction Market™
site name: Polymarket
description: Polymarket is the world's largest prediction market, allowing you to stay informed and profit from your knowledge by trading on future events across various topics.
temporal:status: active
temporal:trade eligibility US: False
temporal:link preview rendering style: enhanced_image_forward

Technology

CDN: Vercel
CMS: Next.js

Third-party hosts loaded (1)

www.google.com×49

Social

Contact

Email

Registration

Registrar

Squarespace Domains II LLC

Created

2003-02-04

Expires

2029-02-04 991 days left

Updated

2024-07-11

Name servers

fatima.ns.cloudflare.com
logan.ns.cloudflare.com

DNS records live

NS

fatima.ns.cloudflare.com
logan.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 16 TXT records

gem-domain-verification=h9AvuFC9HrWpGGdwjttP
google-site-verification=UB1kkwgPqpVGlB22n2Iuka3LbwhnoACYp2mdVCMjZFE
google-site-verification=XW6zPdB4UPPdy3zrYBH7r1XOTACefxg-lrKOg6uzR4M
google-site-verification=gVvRs7kRMMu_3aE9i2_mIS-j5J4c1fh4wSy7TfwGAos
google-site-verification=nH9vvo7Bpva2j-kVkKup7QW-ZBU3QXoovVmAE8cajgg
google-site-verification=nHDjqevSs9lgic4JDLccZOaYzlu7rrmgqY2EWBXmcS8
google-site-verification=pllZV7S6aw92cKI_mffkLZUKBBJHQJ7hQTqnvsKyI3Q
klaviyo-site-verification=Ty5jBe
wallet-connect-dns-verification=13a24db53155ffbe1f0efb7a5b11363a45b38c69aa4c7f3ef872489624043d2b
MS=ms39562866
MS=ms81722453
anthropic-domain-verification-ez2ryw=nVwhAgPTUabpbytWegsQoLjYK
apple-domain-verification=R5qn6W743bD1Xzw9
ca3-3bae8091dbc6450180bc26119a7e182f
cloudflare_dashboard_sso=1e3d8ff87723679f60a6a6cec7a7a9cc
facebook-domain-verification=hd5uj8hu14zvhubzo69rt3yjo3yxzp

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:spf.mandrillapp.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc@polymarket.uriports.com; ruf=mailto:dmarc@polymarket.uriports.com; fo=1:d:s

policy: reject (enforced)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9PtuJ3NSsgn2moQipM10sJ5QyNA1a/Sx29pH9PdkJ8jd8tdTPpbWFT9ngr7G8Jhhi0aI8M41M79/e…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-04-22 to 2026-07-21

Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://polymarket.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' https://*.polymarket.com https://*.polymarket.dev wss://*.polymarket.com wss://*.polymarket.dev https://*.walletconnect.com wss://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.org https://*.web3modal.org https://*.amplitude.com https://*.alchemy.com https://*.alchemyapi.io https://assets.vercel.com https://vercel.live https://vercel.com https://cdp.customer.io https://vitals.vercel-insights.com https://*.magic.link https://*.intercom.io wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.intercomcdn.com https://*.intercomcdn.eu https://*.intercomusercontent.com https://polymarket-upload.s3.us-east-2.amazonaws.com https://polymarket-next-assets.s3.amazonaws.com https://*.coinbase.com https://*.vercel-scripts.com https://*.google-analytics.com https://www.google.com https://*.facebook.com https://*.facebook.net https://*.redditstatic.com https://*.reddit.com https://analytics.tiktok.c
strict-transport-security: max-age=63072000