lucky-green-deposit[.]com

This domain, lucky-green-deposit.com, is under investigation for operating as a fake investment portal designed to harvest financial credentials and personal data from victims. Analysis indicates the site mimics legitimate investment platforms, likely targeting users through deceptive advertisements or unsolicited communications. The objective appears to be the extraction of sensitive information, including login credentials and payment details, under the guise of high-return investment opportunities or exclusive financial offers.

Infrastructure analysis reveals the domain was registered on March 18, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolves to the IP address 172.67.159.155 and uses a Let's Encrypt SSL certificate, which is commonly exploited by threat actors to lend a false sense of legitimacy. Despite its recent creation, the domain has already been flagged on one security blocklist and appears in one AlienVault OTX threat intelligence pulse. Notably, VirusTotal reports 0 detections out of 95 engines, suggesting the domain has not yet been widely flagged by automated scanning systems, though manual review confirms its malicious intent.

Users who visited lucky-green-deposit.com or entered credentials on the site should immediately revoke any sessions, reset passwords for all financial and email accounts, and enable multi-factor authentication where available. Monitor accounts for unauthorized transactions and report any suspicious activity to relevant financial institutions. If payment details were submitted, contact the issuing bank to block potential fraudulent charges. Additionally, scan the device used to access the domain for malware, as phishing sites may deploy additional payloads to maintain persistence or exfiltrate data.