leser-live-en[.]wixstudio[.]com

PhishDestroy identifies leser-live-en.wixstudio.com as an active fake-giveaway phishing page mimicking a legitimate crypto brand. The site is hosted on Wix’s “wixstudio.com” subdomain, a common tactic for rapidly-spun credential-stealing kits. No drainer JavaScript kit is yet fingerprinted in public sandboxes, but the site pushes a spoofed “free ETH giveaway” message that harvests wallet seeds and transaction approvals. The domain lacks any brand association with the impersonated entity, suggesting opportunistic mimicry rather than targeted brandjacking. Technical indicators place the domain at high risk: VirusTotal score is 6/95 detections, registrar is Wix (through Wix.com LLC), and the site resolves to IPv4 199.15.163.135 (AS20717 Wix.com). Certificate is issued by Let’s Encrypt, enabling TLS but not mitigating the fraud. Creation timestamp shows under 72 hours old, and Google Safe Browsing status is currently clear while blocklist counts are still at zero across public feeds. The absence of detections indicates either extreme freshness or evasion via rapid subdomain rotation. Current status is active and under investigation. Wix has not yet suspended the subdomain despite abuse-channel reports. Users should immediately block 199.15.163.135 at the network perimeter and flag all links to leser-live-en.wixstudio.com. Remaining risk is elevated until the site is sink-holed or the associated SSL certificate revoked.