reward-techinfinit[.]com

This domain, reward-techinfinit.com, is flagged as a high-risk brand impersonation threat targeting Aerodrome, a decentralized finance platform. Analysis indicates the site employs a reward-themed lure, presenting a page titled 'INFINIT Rewards' to deceive users into engaging with fraudulent financial schemes. The domain exhibits characteristics consistent with cryptocurrency drainer kits, which are designed to siphon assets from victims' wallets upon interaction. No specific drainer kit family has been conclusively attributed to this campaign at this time, but the operational pattern aligns with known phishing tactics in the decentralized finance sector. Infrastructure analysis reveals the domain was registered through Spaceship, Inc., and resolves to the IP address 66.29.148.12, hosted on AS22612 (Namecheap, Inc.) in the United States. The domain lacks an SSL certificate, a common red flag in phishing infrastructure. VirusTotal reports 1 out of 95 security vendors flagging the domain as malicious, while it appears on 5 distinct security blocklists. Detection engines such as PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura have independently confirmed the domain's malicious status. Google Safe Browsing (GSB) has not yet listed the domain, indicating a potential gap in broader detection coverage. As of the latest assessment, reward-techinfinit.com remains active and unresolved, posing an ongoing risk to users. No takedown or sinkholing actions have been observed, and the domain continues to resolve to its original IP address. The absence of SSL encryption and the use of a recently registered domain further elevate the risk profile. Users are advised to treat this domain as malicious and avoid interaction. Network-level blocking of the IP 66.29.148.12 and monitoring for related domains registered through Spaceship, Inc., are recommended mitigation steps. The persistent activity of this domain underscores the need for heightened vigilance in decentralized finance environments.