boaluck[.]com

PhishDestroy has identified boaluck.com as a generic phishing domain targeting cryptocurrency users with a fake decentralized Web3 gambling platform. The site, titled "Boaluck | Decentralized Web3 Gambling Site with Provable Trust," impersonates legitimate gambling services to trick users into connecting their wallets, ultimately deploying a crypto drainer. This threat poses a significant risk to individuals seeking provably fair gaming experiences, as the site is engineered to steal funds directly from victims' wallets.

Technical analysis reveals several red flags: VirusTotal flags the domain with a score of 2 out of 95 security vendors, indicating initial detection but limited coverage. The domain was registered through Global Domain Group LLC on June 08, 2026, a relatively recent creation date that aligns with malicious intent. It resolves to IP address 104.21.52.11, which is associated with Cloudflare infrastructure, and its SSL certificate is issued by Google Trust Services (WE1). AlienVault OTX includes the domain in 4 threat intelligence pulses, and it appears on 1 security blocklist. Notably, Google Safe Browsing status was not provided, but the domain's presence on multiple threat feeds underscores its malicious nature.

As of the latest check, boaluck.com is offline, suggesting that hosting providers or registrars have taken action to disrupt the scam. However, the domain may still be reactivated or redirected, so users should remain vigilant. PhishDestroy recommends that anyone who has interacted with this site immediately revoke any wallet permissions and monitor their accounts for unauthorized transactions. To verify the safety of any Web3 platform, always consult PhishDestroy's database and avoid connecting wallets to unverified domains. No drainer kit name was specified in the intelligence, but the site's design indicates a sophisticated attempt to harvest credentials and funds.