coinluck[.]fun

The domain coinluck.fun has been confirmed as a crypto drainer phishing site, masquerading as a legitimate on-chain lottery under the brand CoinLuck. This threat is designed to trick users into connecting their cryptocurrency wallets and approve malicious transactions that drain their funds. The site was created on February 21, 2026, and was registered through Go Daddy, LLC, indicating a recent and potentially short-lived campaign.

Technical indicators paint a clear picture of malicious intent. VirusTotal analysis shows that 3 out of 95 security vendors flagged the domain as malicious, and it appears on one security blocklist. The domain resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services (WE1), which lends a false sense of legitimacy. PhishDestroy notes the site is currently offline, but its hosting infrastructure may still pose risks if revived.

As of the latest assessment, coinluck.fun has been taken offline, but the threat landscape remains fluid. Users should remain vigilant against similar lottery-themed phishing sites. To stay safe, avoid clicking on unsolicited links, verify URLs carefully, and use hardware wallets or burner accounts for dApp interactions. If you have connected a wallet to this site, immediately revoke token approvals and transfer assets to a new wallet.