tocqj25178[.]myrajalucks[.]com

PhishDestroy identifies tocqj25178.myrajalucks.com as an active crypto-draining domain that is disguised to trick users into connecting their cryptocurrency wallets. Once connected, the drainer silently transfers tokens to attacker-controlled addresses without requiring additional signatures. This threat is particularly hazardous because victims often remain unaware until after funds vanish. This domain was flagged by PhishDestroy with a seed identifier of 490611. VirusTotal currently shows zero detections out of 95 engines, indicating that mainstream scanners are not yet flagging this address. The domain resolves to Amazon cloud IP 54.192.35.73 and utilizes an Amazon-issued SSL certificate, giving it a deceptive air of legitimacy. Registrar data shows the domain is still active and likely recently created, a common tactic among drainer operators who rapidly cycle domains to evade detection. If you visited tocqj25178.myrajalucks.com, disconnect your wallet immediately and revoke any permissions granted to the site through your wallet’s connection manager. Scan your device for malware using reputable antivirus software and consider transferring remaining funds to a clean wallet. Report the domain to PhishDestroy and your wallet provider to help block future attacks. Never enter wallet credentials or connect your wallet to unfamiliar links regardless of how legitimate they appear.