sharplinksgaming[.]com

On July 25, 2026, analysis identified sharplinksgaming.com as an active banking phishing infrastructure that has been taken offline. The domain was registered on February 21, 2026 through MAT BAO CORPORATION. DNS resolution points to the Cloudflare edge address 104.21.96.151, which belongs to AS13335 Cloudflare, Inc. and is located in the United States. The site presented a TLS certificate issued by Google Trust Services under the WE1 intermediate, confirming the use of Cloudflare’s managed SSL.

Service fingerprints show Cloudflare and HTTP/3 support. Nameserver delegation uses eva.ns.cloudflare.com and jerry.ns.cloudflare.com, both Cloudflare‑operated. The page title returned by the server is "SharpLink Gaming, Inc. | One of the First Nasdaq-Listed Companies to Develop a Treasury Strategy Centered on ETH", indicating an attempt to impersonate a publicly traded gaming company. The malicious activity is classified as banking phishing, targeting victims with fraudulent financial requests.

The domain appears on two public blocklists, PhishDestroy and ScamSniffer, and one of ninety‑three VirusTotal scanners flagged it as malicious. No additional intelligence such as malware payloads, credential‑stealing forms, or URL patterns is currently available, leaving the exact phishing workflow uncertain. Defenders should block the domain and its associated IP address at perimeter filters, add the two blocklist identifiers to detection rules, and monitor for any DNS queries to the listed Cloudflare nameservers. Continuous observation of Cloudflare‑hosted infrastructure and periodic re‑scanning with updated VirusTotal engines are recommended to catch any re‑activation attempts.