chainlink-network[.]org

This domain, chainlink-network.org, is actively impersonating the Chainlink brand and has been classified as a high-risk phishing site. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain resolves to IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335). The nameservers, glen.ns.cloudflare.com and stephane.ns.cloudflare.com, further confirm Cloudflare's role in the domain's hosting environment. Analysis indicates a Gridinsoft trust score of 0/100, reflecting no credibility, and the domain appears on at least one security blocklist, specifically PhishDestroy. VirusTotal reports that 3 out of 93 security vendors have flagged this domain, though the specific detection rules or signatures are not detailed in the available intelligence.

The domain returns an HTTP 301 redirect status, suggesting it may be funneling traffic to another malicious endpoint, though the destination is not specified in the current data. The SSL certificate is issued by Google Trust Services (WE1), which, while not inherently malicious, is commonly used by both legitimate and fraudulent sites. The page title, chainlink-network.org, aligns with the domain name but does not provide additional context about the site's content or functionality. No evidence of a phishing kit or specific scam subtype (e.g., crypto drainer, fake wallet) is present in the available data, so the exact mechanics of the scam remain unconfirmed. Defenders should treat this domain as hostile.

Immediate actions include blocking the domain and its resolving IP (188.114.96.3) at the network perimeter, updating endpoint protection rules to flag or quarantine any connections, and monitoring for internal traffic attempting to access chainlink-network.org.