app-chanilink[.]com

PhishDestroy identifies app-chanilink.com as a fraudulent domain designed to impersonate the official Chainlink website, potentially targeting users with cryptocurrency theft. This site is actively used in generic phishing campaigns to deceive visitors into sharing sensitive information such as wallet credentials or private keys. The threat involves social engineering users through a lookalike interface that closely mimics Chainlink’s branding and messaging about bridging smart contracts with real-world data. This domain was flagged for active phishing activity following its creation on October 03, 2025. Intelligence shows it resolves to IP address 172.67.168.210 and is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED. Despite the malicious nature of the site, VirusTotal currently reports a concerning 5 out of 95 detection rate, meaning no security vendors have yet flagged it. The site even utilizes a legitimate SSL certificate issued by Google Trust Services, which may further deceive users into believing its authenticity. These technical indicators suggest a deliberate effort to avoid early detection while leveraging trust through valid infrastructure components. If you have visited app-chanilink.com, do not enter any sensitive information such as wallet addresses, private keys, or seed phrases. Disconnect from the site immediately and scan your device for malware using reputable security software. If you provided any cryptocurrency wallet details, transfer remaining funds to a new wallet as soon as possible and revoke any suspicious smart contract approvals via blockchain explorers. Report the domain to your cybersecurity team or relevant authorities such as Chainlink’s official security contacts or platforms like PhishDestroy to aid in its shutdown. Always verify website URLs and use bookmarks for official sites to prevent future exposure to similar threats.