rewards-sharplink[.]xyz

This domain, rewards-sharplink.xyz, was created on July 17, 2025 through OwnRegistrar, Inc. and currently resolves to the Cloudflare address 172.67.152.3 (AS13335, United States). The site presents a page titled “SharpLink Gaming, Inc. | One of the First Nasdaq-Listed Companies to Develop a Treasury Strategy Centered on ETH”, indicating a brand‑impersonation attempt targeting Ethereum users. The SSL certificate is identified as WE1, confirming the use of a valid TLS layer despite the malicious intent.

Two independent blocklists, PhishDestroy and ScamSniffer, have already listed the domain, and overall it appears on two security blocklists. VirusTotal analysis shows three of ninety‑three scanning engines flag the domain as malicious, reinforcing the suspicion. Gridinsoft assigns a trust score of zero out of one hundred, further evidencing its low reputation.

The campaign is classified as a crypto scam with an elevated risk rating, and the domain’s status is reported as offline at the time of this analysis (July 22, 2026). Defenders should immediately block DNS resolution to 172.67.152.3, add the domain to URL filtering policies, and monitor for any residual click traffic. Given the short lifespan and the use of reputable hosting infrastructure, threat actors may pivot to new domains; continuous threat‑intel feeds should be consulted for emerging indicators of compromise related to Ethereum‑focused phishing.