Domain hosted in Romania that is impersonating Chainlink Labs and claiming to offer discounted sale of the Chainlink (LINK) token. The domain uses JavaScript code to try an initiate a TrustWallet transacation when a victim wants to "buy" a token.
0xb209 is a Binance deposit addresses where the scammers sent victim funds.