# linelive.live — SUSPICIOUS > Discover why linelive.live is a credential theft domain with a 1/95 VirusTotal detection rate. See how it resolves to 188.114.96.3 and what to do if exposed. ## Summary PhishDestroy identifies linelive.live as an active crypto drainer posing as a generic streaming platform to harvest user credentials. This domain was flagged by only one of 95 security vendors on VirusTotal, highlighting its ability to evade detection while targeting unsuspecting victims. Registered via Name.com, Inc. on March 21, 2026, the infrastructure leverages a Let's Encrypt SSL certificate, adding a veneer of legitimacy to its malicious operations. Indicators reveal linelive.live resolves to IP 188.114.96.3, a known malicious endpoint associated with low-profile credential theft campaigns. Its recent creation date and minimal blocklist presence demonstrate attackers' reliance on fresh domains to bypass traditional defenses. The use of Let's Encrypt certificates further complicates detection by mimicking legitimate service providers. Users who visited linelive.live should immediately revoke any shared credentials, enable multi-factor authentication on all accounts, and scan their devices for malware. Security teams should block the domain at the network perimeter and monitor for unauthorized access attempts. Treat any interaction with this site as a potential compromise. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2026-03-21 05:58:53 - Registrar: Name.com, Inc. - IP: 188.114.96.3 ## Detection Status - VirusTotal: 1 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/6ebdcd2d-cdf7-46bc-9eb2-a4d5e069988b - PhishDestroy: https://phishdestroy.io/domain/linelive.live/ - LLM endpoint: https://phishdestroy.io/domain/linelive.live/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/linelive.live/ Last updated: 2026-04-01