MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für linkreward.live
linkreward[.]
Analysis of the domain linkreward.live shows it is currently active and hosted behind Cloudflare’s network (nameservers dawn.ns.cloudflare.com and ezra.ns.cloudflare.com).
- VirusTotal
- 4/91
- Blocklists
- No stored match
- Verfügbarkeit
- Erreichbar · Zugang eingeschränkt · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
linkreward.live — Erreichbar · Zugang eingeschränkt (HTTP 403). Zusammenfassung der Beweislage: VirusTotal 4/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Fortinet, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 71/100. Registrar: NiceNIC.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
Analysis of the domain linkreward.live shows it is currently active and hosted behind Cloudflare’s network (nameservers dawn.ns.cloudflare.com and ezra.ns.cloudflare.com). The domain resolves to IP address 104.21.72.42, which is geolocated to Canada and is part of Cloudflare, Inc.'s infrastructure. Registration was performed through NICENIC INTERNATIONAL GROUP CO., LIMITED, but no further registrant details are disclosed. An HTTPS connection presents a certificate issued by Google Trust Services under the WE1 designation, indicating a valid TLS handshake despite the suspicious nature of the site. HTTP requests return a 403 status code, and the only visible page title is "Just a moment...", suggesting a Cloudflare challenge page rather than a functional landing page. VirusTotal analysis records four detections out of ninety‑one scanned engines, and the domain is listed on at least one public blocklist and has been blocked by the PhishDestroy service. These indicators collectively point to a high‑risk, generic phishing operation, although the specific payload or targeted brand has not been observed. Defenders should treat linkreward.live as malicious: block DNS resolution, enforce web‑filter rules, and monitor outbound connections to its Cloudflare IP. Continuous threat‑intel feeds should be consulted for any emerging signatures or associated command‑and‑control activity, and incident response teams should be prepared to investigate any credential or session data that may be exfiltrated if users interact with the site.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit Registrar context
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:45:49 UTC
Technologien · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % KonfidenzCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % KonfidenzHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of linkreward.live · checked Jul 20, 2026
Nachweise und externe BerichteIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.