Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
linktreasury[.]org
“Chainlink: The Industry-Standard Oracle Platform”
संग्रहीत अवलोकन
देखा गया शीर्षक अंतर
साक्ष्य सारांश
The domain linktreasury.org is classified as a high‑risk, active generic phishing site as of July 24, 2026. It first appeared on a security blocklist on the same day it was created (February 21, 2026) and is also listed by PhishDestroy. VirusTotal reports that 2 of 93 security vendors have flagged the domain, indicating partial detection. Gridinsoft assigns it a trust score of 0 out of 100, reinforcing the malicious assessment. The site returns an HTTP 307 status, suggesting a temporary redirect that may be used to funnel victims to a credential‑harvesting endpoint.
Technical fingerprinting reveals the presence of Salesforce, Zendesk, Twitter Ads, LinkedIn Insight Tag, jsDelivr, jQuery, HubSpot Chat, and HubSpot Analytics, all of which are commonly abused for tracking and data exfiltration. The domain is registered through NiceNIC International Group Co., Limited and resolves to IP 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. Nameservers are anderson.ns.cloudflare.com and dorthy.ns.cloudflare.com, confirming Cloudflare’s DNS hosting. SSL is provided by Google Trust Services under the WE1 certificate, indicating a valid TLS certificate despite the underlying malicious intent.
The only visible page element is the title "Chainlink: The Industry‑Standard Oracle Platform," which does not match the domain name and may be intended to lure users interested in blockchain services. No further page content has been examined, so the exact phishing flow, credential‑capture mechanisms, or payload delivery remain unknown. Defenders should immediately block the domain at perimeter and endpoint controls, add it to internal threat feeds, monitor for any redirects originating from the 307 response, and watch for traffic to the associated Cloudflare IP. Continuous re‑scanning with VirusTotal and other sandbox services is advised to capture any evolving malicious components.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260214-702A47- कैप्चर किए गए पेज का शीर्षक
- Chainlink: The Industry-Standard Oracle Platform
- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Policy Violations: “Services may be used only for lawful purposes… fraud, abuse and illegal activity prohibited. Violations may result in immediate suspension.” + dedicated abuse handling and takedown
Applicable Laws: Crimes Ordinance Cap.200 (Fraud), Theft Ordinance Cap.210 §16A (fraud by deception), Personal Data (Privacy) Ordinance Cap.486
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of linktreasury.org · checked Mar 2, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।