luckdrop[.]cc

PhishDestroy identifies luckdrop.cc as a live generic phishing domain impersonating the Lucky Shopper brand to harvest cryptocurrency via a malicious drainer kit. The page title “Lucky Shopper” is presented to deceive visitors into believing they have accessed a legitimate retail site offering discounts or giveaways. Behind the scenes, the domain serves JavaScript designed to drain wallets upon interaction, specifically targeting MetaMask and other Web3 extensions. The infrastructure is purpose-built for credential and asset theft, with no legitimate e-commerce functionality present.

luckdrop.cc resolves to IP 172.67.166.174 and was registered on May 02, 2026 via Gname.com Pte. Ltd. VirusTotal currently scores the domain 2/95 security vendors flagged, indicating limited but notable detection. The domain is flagged in Google Safe Browsing and appears on two additional independent threat blocklists. It uses a valid Let's Encrypt SSL certificate to enhance credibility. These indicators confirm a recently activated, low-profile but active phishing campaign leveraging newly registered infrastructure.

As of today, luckdrop.cc remains active and continues to serve the malicious drainer kit. MetaMask and the SEAL extension are actively blocking access, preventing some infections. Despite partial protections, the domain remains accessible via direct navigation and search, and its low VT detection suggests it may evade less rigorous filters. Users are strongly advised to avoid interaction, report the domain to their security vendors, and verify all shopping links via official channels. The residual risk remains high due to ongoing activity and potential for increased detection evasion.