boostdiamoxai[.]com

The suspicious domain boostdiamoxai.com has been identified by PhishDestroy as a potential crypto drainer, a type of threat designed to divert cryptocurrency transactions to attacker-controlled wallets. As the risk level remains under investigation, immediate caution is advised due to its active status and lack of visible mitigation measures.

This domain presents several red flags based on available intelligence. It resolves to the IP address 188.114.97.3 and is registered through Fewmoretaps OU d/b/a Trustname.com. Registered on March 22, 2026, the domain uses a Let's Encrypt SSL certificate, which may lend an air of legitimacy. Critically, VirusTotal currently shows 0 detections out of 95 scanners, indicating this threat may still be in its early stages or employing evasion tactics. The combination of recent registration, low detection rates, and active infrastructure warrants heightened scrutiny.

Mitigation for a suspected crypto drainer like boostdiamoxai.com requires immediate action. Organizations and individuals should block the domain and associated IP (188.114.97.3) at the network perimeter. Review and update wallet address verification processes to include manual confirmation for any transaction requests originating from or linked to domains with recent registrations or low trust scores. Additionally, deploy browser extensions or DNS filtering solutions capable of identifying and blocking crypto drainer domains before users interact with them. If already exposed, revoke any unauthorized transactions and monitor linked wallets for suspicious transfers.