algo-rewards[.]top

Analysis of the domain algo-rewards.top indicates a confirmed wallet/seed phishing operation targeting the Algorand foundation. The domain was registered on 21 February 2026 and resolves to the IP address 104.21.19.92, which is owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. The TLS certificate presented is labeled WE1, suggesting a standard Cloudflare‑issued certificate. The site’s HTML title resolves to “Algorand Governance,” aligning with the declared brand target of the Algorand foundation and supporting the attribution of brand impersonation.

VirusTotal records show that three of ninety‑three scanning engines flagged the domain as malicious, providing independent vendor corroboration. The domain is currently listed on four security blocklists and has been actively blocked by the PhishDestroy, Polkadot, Enkrypt, and Codeesura mitigation services. The observed scam type is classified as wallet/seed phishing, implying that the site likely solicits private keys or recovery phrases from victims. At the time of reporting (24 July 2026) the site is offline, which may be a temporary takedown or a deliberate switch‑off after a campaign burst.

No additional content or HTTP response details are available, leaving the exact phishing page layout unverified. Defenders should continue to monitor the associated IP address and Cloudflare ASN for any re‑use, enforce blocklist entries for algo-rewards.top across gateway and endpoint controls, and educate users about unsolicited requests for Algorand seed phrases. Threat intelligence feeds should be updated to reflect the domain’s creation date, host infrastructure, and observed vendor detections to improve early warning capabilities.