rajaluck[.]co

PhishDestroy identifies rajaluck.co as a high-risk crypto drainer domain currently under active investigation, with a preliminary risk level classified as under_investigation due to emerging threat patterns.

This domain was flagged by PhishDestroy’s automated pipeline after zero detections on VirusTotal out of 95 engines, indicating that mainstream antivirus and security tools have not yet updated their signatures to recognize the threat. The domain rajaluck.co was registered on April 23, 2025, through GoDaddy.com, LLC, resolving to the IP address 13.226.244.112. Despite the presence of an SSL certificate issued by Amazon, which often lends false legitimacy to phishing sites, no entries were found on known blocklists or domain reputation services at the time of analysis. Trust scores remain neutral or unrated across threat intelligence platforms, reflecting the domain’s recent creation and undetected malicious activity.

Users are strongly advised to avoid interacting with rajaluck.co, especially transactions involving cryptocurrency wallets or login credentials. This domain may be used to impersonate legitimate services in order to trick users into connecting malicious smart contracts or divulging private keys. As a crypto drainer, it could automatically transfer funds from connected wallets once approval is granted. PhishDestroy recommends validating all unknown domains using its verification tool and immediately revoking any wallet connections made to this site.