luckyline[.]space

PhishDestroy identifies luckyline.space as a crypto drainer domain flagged for active phishing operations. The domain is designed to impersonate the legitimate Luckyline.io platform, tricking users into connecting crypto wallets for unauthorized fund transfers. Domain Registrar: REG.RU LLC SSL Provider: Google Trust Services Creation Date: September 24, 2025 IP Resolution: 188.114.96.3 VirusTotal Score: 1/95 detections (unflagged as of latest scan) Google Safe Browsing (GSB): Status undisclosed

Technical indicators reveal a newly registered domain with no immediate detections despite its malicious intent. The domain resolves to a Cloudflare IP (188.114.96.3), a common hosting provider for both legitimate and malicious services. With a creation date of September 24, 2025, this domain is highly suspicious due to its recent registration and lack of historical reputation. The absence of detections (1/95) suggests either a very new campaign or evasion tactics, while the Google Trust Services SSL certificate adds a superficial layer of legitimacy.

This domain remains under active investigation with a status of 'under_investigation' and a current risk level of 'active'. Security researchers are urged to monitor for updated blocklist entries and signature-based detections. Users are strongly advised to avoid interactions with luckyline.space and verify similar domains via PhishDestroy before engaging. The remaining risk is high due to the domain’s recent activity, lack of detections, and potential to deceive unsuspecting victims.