reward-boosteth[.]net

Analysis of reward-boosteth.net shows a high‑risk brand‑impersonation campaign that leverages a fake airdrop theme. The domain was registered on 2026‑02‑21 through NiceNIC International Group Co., Limited and is currently offline. DNS resolution points to 104.21.43.55, an address owned by AS13335 Cloudflare, Inc., located in the United States. Both authoritative nameservers—kayleigh.ns.cloudflare.com and mack.ns.cloudflare.com—are Cloudflare‑managed, indicating the operator is using a reputable CDN to hide the origin of the payload.

No TLS certificate is presented for the site, meaning the service was delivered over plain HTTP, a common characteristic of short‑lived phishing or scam pages that rely on rapid deployment rather than long‑term credibility. The page title captured during the brief observation was "Ethereum Liquid Staking," consistent with the declared scam type of a fake airdrop targeting cryptocurrency users. VirusTotal records show that 12 of 93 scanning engines flagged the domain, reflecting a moderate consensus of malicious intent among security vendors. The domain appears on six independent blocklists and has been explicitly blocked by anti‑phishing and wallet‑security products including PhishDestroy, MetaMask, Polkadot, SEAL, and Enkrypt.

These detections collectively confirm that defensive tools consider the site abusive. While the site’s exact HTML content and any secondary infrastructure remain unknown due to its offline state, the observable indicators—recent creation date, Cloudflare IP usage, lack of HTTPS, malicious blocklist presence, and the Ethereum‑related page title—provide sufficient evidence for security teams to treat the domain as malicious. Defenders should add reward-boosteth.