legelivlgnn[.]wixstudio[.]com

PhishDestroy identifies legelivlgnn.wixstudio.com as an active cryptocurrency drainer impersonating legitimate login portals. This domain leverages a legitimate WixStudio hosting platform to lend an air of authenticity while deploying malicious code designed to drain cryptocurrency wallets upon user interaction. The threat remains undetected by most antivirus engines, with VirusTotal reporting 0 detections out of 95 engines as of the latest scan. The domain resolves to IP address 34.144.206.118 and utilizes an SSL certificate issued by Let’s Encrypt, which may further deceive users into believing the site is trustworthy. This domain was flagged under seed 744184 due to its active status and specific threat profile. Investigation reveals no prior detections on VirusTotal, suggesting this campaign is either newly deployed or carefully crafted to evade detection. The domain is currently hosted on WixStudio’s infrastructure, which is frequently exploited by threat actors for phishing and credential theft campaigns. While the exact creation date and registrar details are not provided in the available intelligence, the lack of detections indicates a potential zero-day threat that requires immediate attention to prevent further compromise. If you have visited this domain or interacted with its content, disconnect from the internet immediately to prevent unauthorized transactions. Scan all connected devices for malware using reputable antivirus software. Avoid entering any personal or financial information on the site. Report the domain to your cybersecurity team and consider blocking it at the network level. Stay vigilant for unusual activity in your cryptocurrency wallets and financial accounts.