rewards-chainlink[.]info

The domain rewards-chainlink.info was registered on February 21, 2026 and is currently offline. DNS resolution points to the IP address 160.153.0.68, which belongs to AS209242 (Cloudflare London, LLC) and is geolocated in the United States. The site presented the page title "Legacy Lens" before being taken down. Security telemetry shows the domain appears on three independent blocklists—PhishDestroy, ScamSniffer, and Enkrypt—indicating that multiple threat‑intel feeds have flagged it as malicious.

VirusTotal analysis recorded 14 detections out of 93 scanning engines, reinforcing the suspicion of malicious activity. The SSL certificate associated with the host is identified as "WE1," a generic certificate often seen on compromised or temporary hosting. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating, suggesting the infrastructure is considered highly untrustworthy. The campaign is classified as a brand impersonation targeting GoDaddy, consistent with the declared scam type.

While the page content has not been publicly captured, the combination of blocklist listings, multiple vendor detections, a zero trust score, and the GoDaddy impersonation label provides strong evidence of a credential‑harvesting operation. Defenders should continue to block the domain at network perimeter devices, update DNS filtering rules, and monitor for any residual traffic to the associated IP address. Incident response teams should also review logs for attempts to contact the domain prior to its takedown and consider informing affected users of potential credential compromise.