boosteth-prize[.]com

This domain is flagged as a high-risk brand impersonation threat targeting cryptocurrency wallet users. Analysis indicates the site mimics legitimate wallet services to deceive users into disclosing sensitive credentials or authorizing fraudulent transactions, a tactic commonly associated with crypto drainer schemes. The impersonation specifically targets users of the Argent wallet, a decentralized finance platform, by presenting a fabricated interface designed to harvest recovery phrases or private keys. Infrastructure analysis reveals the domain boosteth-prize.com was registered on December 27, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. The domain resolves to the IPv6 address 2606:4700::6812:b098, hosted on Cloudflare, Inc. (AS13335) infrastructure located in the United States. The site lacks an SSL certificate, a red flag for user security. Detection metrics further confirm the malicious nature of the domain: Google Safe Browsing classifies it as phishing, while VirusTotal reports 17 out of 95 security vendors flagging it as malicious. The domain appears on three security blocklists, including PhishDestroy and SEAL, and is actively blocked by browser-based wallet extensions. The page title, "Ethereum.org : le guide complet d'Ethereum," suggests an attempt to mislead users by impersonating official Ethereum documentation, a common social engineering tactic in crypto-related phishing campaigns. To mitigate risks associated with this threat, users are advised to verify domain authenticity by cross-referencing official wallet provider communications. Any interaction with boosteth-prize.com should be treated as a security incident, requiring immediate revocation of connected wallet permissions and a thorough audit of recent transactions. Organizations should update blocklists to include this domain and its associated IP address, while users should enable multi-factor authentication on all cryptocurrency-related accounts. Given the domain's registration date and Cloudflare hosting, monitoring for similar domains registered through NiceNIC or resolving to the same IP range may help preempt future impersonation attempts.