# level-9.live — SUSPICIOUS

> A crypto drainer impersonating a wallet site, domain level-9.live has 0/95 VirusTotal detections. Verify with PhishDestroy before entering credentials or.

## Summary
The domain level-9.live is a recently registered site posing as a cryptocurrency wallet service with the intent to steal deposited funds. PhishDestroy identifies it as hosting a crypto drainer, a fraudulent script that transfers any crypto sent to its wallet addresses to attacker-controlled accounts. Users attempting to use this service risk losing all funds deposited without trace or recovery options.  PhishDestroy flags the domain as active today; VirusTotal scans show 0 detections out of 95 engines, indicating limited or no detection by security tools. The domain was created on January 19, 2026, through Name.com, Inc., and resolves to IP 34.111.179.208 under a Let's Encrypt SSL certificate, all of which are common traits for newly deployed malicious sites. Its low detection rate suggests this threat is still emerging and not widely recognized by AV providers.  If you accessed level-9.live, do not enter any wallet credentials or send crypto to any address shown. Disconnect the device from the internet to prevent further unauthorized actions. Run a malware scan on your system to detect any fraudulent processes. Report the domain and any interaction points to PhishDestroy immediately to help update detection signatures and protect the community. Remain vigilant for unusual transaction confirmations or wallet balance changes after any interaction with this site.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-19 10:46:23
- Registrar: Name.com, Inc.
- IP: 34.111.179.208

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f56a7ce3-5e1a-44fb-9e78-75cb82729425
- PhishDestroy: https://phishdestroy.io/domain/level-9.live/
- LLM endpoint: https://phishdestroy.io/domain/level-9.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/level-9.live/
Last updated: 2026-03-21