open-livelege[.]wixstudio[.]com

PhishDestroy identifies open-livelege.wixstudio.com as an *active* crypto-drainer domain under investigation for mimicking a prominent brand’s official web presence, creating a high-risk vector for cryptocurrency theft through social engineering and phishing lures.

This domain resolves to IP 34.144.206.118 and operates under Wix Studio hosting, where a recently issued Let’s Encrypt SSL certificate provides deceptive legitimacy. VirusTotal currently reports 0 detections out of 95 engines, indicating evasion of traditional scanning tools. Registration details are not publicly disclosed via standard WHOIS, but infrastructure analysis ties it to a Google Cloud Platform (GCP) node in the us-central1 region, suggesting dynamic or short-lived deployment designed to evade blacklists. The domain shows no presence on major blocklists (Google Safe Browsing, PhishTank, OpenPhish) as of this report, and domain trust scores (e.g., Majestic Million) are not available due to anonymization. Creation date and registrar remain unverified, which is itself a red flag consistent with fast-flux or disposable infrastructure.

Mitigation is urgent: users encountering this domain must immediately cease interaction and avoid entering any wallet credentials, seed phrases, or transaction signatures. Block the domain at DNS and host-file levels. Report the domain to PhishDestroy and forward wallet addresses suspected of interaction to blockchain analysis platforms. If contact has already occurred, revoke any approvals via wallet interfaces, transfer funds to a clean wallet, and consider hardware wallet isolation. Always verify official links via brand websites or trusted app stores, never through unsolicited messages or third-party domains.