xrphtokenrewards[.]com

This domain, xrphtokenrewards.com, poses a brand impersonation threat targeting OKX users through a fraudulent NFT credential scheme. Analysis of the page title, "XRPH Genesis NFT — Limited Ecosystem Credential | XRP Healthcare," indicates an attempt to deceive victims into believing they are accessing an exclusive OKX ecosystem reward. The domain mimics legitimate cryptocurrency reward programs, a common tactic to harvest credentials or distribute malicious payloads under the guise of limited-time offers. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on June 01, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 188.114.96.3. It appears on 2 security blocklists and is flagged by 7 out of 95 security vendors on VirusTotal. Additional technical data includes the use of Google Trust Services for SSL certification, Cloudflare for hosting, and technologies such as HSTS and HTTP/3. The domain has been identified in 2 AlienVault OTX threat intelligence pulses, further corroborating its malicious intent. Users who visited xrphtokenrewards.com should take immediate action to mitigate potential compromise. Disconnect any connected wallets or sessions initiated through the site and revoke permissions for associated smart contracts. Scan local devices for malware using updated security tools, as the domain may have facilitated drive-by downloads or credential theft. Monitor financial accounts and cryptocurrency wallets for unauthorized transactions, and report the incident to relevant platforms or security teams for further investigation.