linea-rewards[.]com

This domain, linea-rewards.com, is actively flagged as a high-risk brand impersonation threat targeting Linea. Registered on February 21, 2026, through Key-Systems GmbH, the domain resolves to IP address 172.67.147.118, hosted on Cloudflare's infrastructure (AS13335) in the United States. Analysis indicates the domain lacks an SSL certificate, a common red flag for malicious sites, and returns an HTTP 200 status, suggesting it is operational and serving content. The page title matches the domain name exactly, reinforcing its impersonation intent as no additional context or branding is visible in the available metadata. Infrastructure analysis reveals the domain uses nameservers ns1.emailverification.info and ns2.emailverification.info, a pattern observed in other phishing campaigns. It appears on one security blocklist and is flagged by 11 out of 95 security vendors on VirusTotal, confirming its malicious classification. The Gridinsoft trust score of 0/100 further corroborates its high-risk status. While the exact content of the page remains unanalyzed, the domain aligns with known impersonation scams, likely designed to deceive users into divulging credentials or sensitive information under the pretense of Linea-related rewards or promotions. Defenders should prioritize blocking this domain at the DNS and network levels, particularly for endpoints associated with Linea or its user base. The absence of an SSL certificate and the use of Cloudflare hosting, while not inherently malicious, are consistent with tactics used to evade detection and prolong the lifespan of phishing sites. Given its active status and confirmed impersonation of a legitimate brand, organizations should monitor for related domains using the same nameserver infrastructure or registration patterns. Additional scrutiny of logs for connections to 172.67.147.118 is recommended to identify potential compromises or ongoing attacks.