lelixio-it[.]live

lelixio-it.live has been assessed with an elevated risk level and is specifically categorized as a crypto drainer phishing site. The domain was created on May 27, 2026, and has been flagged by security vendors and included in blocklists, indicating its malicious intent.

Analysis indicates that lelixio-it.live has been flagged by 6 out of 95 security vendors on VirusTotal, a low but significant detection rate that suggests the domain's potential threat. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for being associated with various suspicious activities. The domain resolves to the IP address 2a06:98c1:3120::3, which may be linked to additional malicious infrastructure. The SSL certificate used is from Let's Encrypt, a common choice for phishing sites due to its ease of acquisition. The site also employs technologies such as jsDelivr, jQuery, IPinfo, and Cloudflare services, including Cloudflare Browser Insights, which can be used to enhance the legitimacy of the site and evade detection. The Gridinsoft trust score for this domain is a concerning 0/100, further confirming its malicious nature. The domain appears on 1 security blocklist, specifically PhishDestroy, and has been taken offline as of the latest assessment.

To mitigate the risks associated with a crypto drainer phishing site, it is recommended to avoid clicking on any links or entering personal information on this domain. Users should also monitor their cryptocurrency wallets and transactions for any unauthorized activity. Network administrators should update their DNS and firewall configurations to block this IP address and any associated domains. Additionally, implementing multi-factor authentication (MFA) and using reputable security solutions that can detect and block phishing attempts can provide an additional layer of protection. Regularly updating security awareness training to include emerging threats such as crypto drainers is also advised.