open-lgderlives[.]wixstudio[.]com

PhishDestroy identifies open-lgderlives.wixstudio.com as a live phishing domain impersonating legitimate crypto services to deploy a drainer kit designed to siphon funds from unsuspecting victims. This domain exhibits classic phishing characteristics, leveraging a WixStudio-hosted page to deliver a fraudulent crypto drainer under the pretense of airdrop or reward claims. Technical indicators reveal the site resolves to IP 34.144.206.118, operates with a Let’s Encrypt SSL certificate, and has zero detections across 95 VirusTotal engines as of the latest scan. The domain was created recently and is currently categorized as high-risk due to its active phishing payload and deployment infrastructure. Despite current blocklisting by PhishingArmy and inclusion on one additional security blocklist, the domain remains accessible via its hosting provider and has not been globally sinkholed. While its Google Safe Browsing status is neutral, the presence of a live drainer script and lack of enterprise-grade takedowns elevate the risk to active and sustained threat potential. Users interacting with this domain risk immediate financial loss through unauthorized crypto transfers or credential harvesting. Safety guidance includes immediately blocking the IP 34.144.206.118 and domain open-lgderlives.wixstudio.com at network and DNS levels. Organizations should inspect proxy logs for recent access attempts and enable browser-based protection against known phishing patterns. Users are advised to verify all crypto-related URLs via official channels and avoid interacting with unsolicited airdrop or reward claims.