chainlink-hack-frontend[.]vercel[.]app

The domain chainlink-hack-frontend.vercel.app is actively hosting a site titled “Online Safety Game” and is classified as a high‑risk brand‑impersonation campaign targeting the Chainlink brand. Infrastructure analysis reveals that the domain resolves to IP 64.29.17.131, an address owned by Amazon.com, Inc. (AS16509) located in the United States. The site is served over HTTPS using a certificate issued by Google Trust Services under the WR1 designation, and HTTP requests return a 200 status code. Technical fingerprints indicate the use of Vercel hosting, embedded YouTube resources, and HTTP Strict Transport Security (HSTS) enforcement. Registration data shows the domain was created on 21 February 2026 through Tucows Domains Inc. The activity is identified as a crypto‑related scam, and the domain appears on one security blocklist. Independent scanning reports flag the domain on 2 of 91 security vendors, and the Gridinsoft trust score is 0 / 100, confirming a malicious posture. The domain is currently blocked by PhishDestroy. At present, the exact content of the landing page beyond the title has not been examined, and the specific tactics used to lure victims remain unknown. Defenders should block the domain at network perimeters, update URL filtering lists, and monitor for related indicators such as the associated IP address and TLS certificate. Continuous observation is recommended to capture any evolution of the campaign’s payload or infrastructure.