awardlink[.]org

The domain awardlink.org was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently hosted on Cloudflare infrastructure (AS13335) with the public address 172.67.161.162. DNS resolution uses the Cloudflare authoritative name servers adi.ns.cloudflare.com and rodney.ns.cloudflare.com. An HTTP 307 redirect is observed, and the TLS certificate presented is issued by Google Trust Services under the WE1 hierarchy, indicating a valid certificate chain. The page title returned from the redirected URL is "Chainlink: The Industry-Standard Oracle Platform," a title unrelated to the domain name and suggestive of brand impersonation.

Technical fingerprinting shows the presence of Salesforce, Zendesk, Twitter Ads, LinkedIn Insight Tag, jsDelivr, jQuery, HubSpot Chat, and HubSpot Analytics, all typical of commercial web stacks but offering no direct indication of malicious functionality. VirusTotal analysis reports that 2 of 93 scanning engines have flagged the domain, confirming a modest level of detection by security vendors. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, specifically PhishDestroy, which has listed it as a phishing source. No additional public blocklists or safe‑browsing services are noted.

The combination of a recent registration, Cloudflare hosting, a legitimate SSL certificate, and a mismatched page title aligns with patterns commonly observed in generic phishing campaigns that leverage trusted brand names to lure victims. While the exact payload or credential‑capture mechanism has not been disclosed, the available evidence is sufficient to classify the domain as high‑risk. Defenders should block awardlink.org at perimeter devices, update URL filtering policies, and monitor for any outbound connections to the associated IP address.