rewardspool[.]biz

This report analyzes rewardspool.biz, a domain flagged as a generic phishing threat under investigation as of July 24, 2026. The domain is classified as a Fake Airdrop scam, a common tactic used to deceive users into connecting wallets or sharing credentials under the promise of free tokens. The domain was created on February 21, 2026, and resolves to IP address 151.101.65.140, hosted in the United States on AS54113 Fastly, Inc. It uses an SSL certificate from WE1. VirusTotal scanned the domain with 93 vendors, and none currently flag it as malicious; however, this absence of detections does not confirm safety, as phishing domains often evade initial detection.

The domain appears on two security blocklists and is blocked by PhishDestroy and ScamSniffer, indicating prior threat intelligence flagged it. The domain is currently offline, suggesting it may have been taken down or its hosting suspended. No specific brand, page title, or phishing kit details are available in the intelligence, meaning the exact lure or impersonated platform is unconfirmed. Defenders should treat this domain as a confirmed phishing infrastructure based on its classification, blocklist presence, and takedown status.

Recommendations include monitoring for related domains using the same IP or registration patterns, reviewing user reports for any interactions with this domain, and ensuring any cached or archived content is analyzed to identify targeted brands or wallet addresses. Safe Browsing and OTX data were not provided, so their status remains unknown. No trust scores or HTTP status were reported. The domain should remain on blocklists and be flagged for further analysis if it reappears online.