roofido[.]top

This domain, roofido.top, is flagged as a high-risk phishing site specifically targeting users of the Chainlink cryptocurrency platform. Analysis indicates the site employs generic phishing tactics, likely designed to harvest wallet credentials or deploy malicious smart contract interactions. The page title explicitly mimics Chainlink, a well-known blockchain oracle service, suggesting an intent to deceive users into believing the site is legitimate. No specific drainer kit signatures have been identified at this time, but the infrastructure aligns with common phishing toolkits used in cryptocurrency fraud. Infrastructure analysis reveals the following technical indicators: the domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on July 06, 2026, an unusually future-dated registration that may indicate an attempt to evade detection or scrutiny. It currently resolves to the IP address 188.114.96.3, which has been associated with other suspicious domains in recent threat intelligence reports. VirusTotal detection shows 1 out of 95 security vendors flagging the domain as malicious, a low but non-zero signal that warrants caution. Google Safe Browsing (GSB) status is not explicitly listed, but the domain is absent from major blocklists, suggesting it may still be in the early stages of deployment or evading broader detection. As of the latest assessment, roofido.top remains active and poses a significant risk to users who may inadvertently interact with it. Response actions should include immediate reporting to domain registrars, hosting providers, and cryptocurrency security platforms to facilitate takedown efforts. Users are advised to verify domain authenticity through official Chainlink channels and avoid entering sensitive information on untrusted sites. The remaining risk is classified as high due to the domain's active status, targeted branding, and potential for credential theft or financial loss. Continuous monitoring is recommended to track any shifts in infrastructure or detection rates.