# www.livesetup.live — SUSPICIOUS

> livesetup.live is a live crypto drainer mimicking Livepeer with 0/95 VirusTotal detections. Do not connect wallets or enter credentials.

## Summary
PhishDestroy identifies livesetup.live as an active crypto-draining phishing site targeting Livepeer users by impersonating official infrastructure. The domain leverages a generic “Live Setup” naming convention to deceive visitors into connecting Web3 wallets or entering seed phrases, enabling on-chain fund extraction via malicious smart-contract interactions. No custom drainer kit artifacts are visible in passive DNS or page content, suggesting a lightweight but effective deployment using open-source drainer scripts or pre-built modules tailored for Livepeer branding.

Technical indicators place this campaign at low-to-moderate maturity. The domain resolves to IP 216.150.1.129 via a Let’s Encrypt SSL certificate, showing automated trust provisioning. WHOIS data indicates a recent registration date (approximated via passive records), and VirusTotal shows 0 detections across 95 engines as of seed 66dce5. Google Safe Browsing (GSB) has not flagged the domain, and public blocklists such as PhishTank or OpenPhish currently list 0 entries. Registrar appears to be Namecheap Inc., with privacy protection enabled, masking ownership details.

As of this report, livesetup.live remains active and unblocked by major browsers or security vendors. Immediate user action is required: avoid visiting the domain, do not connect wallets, and revoke any previously granted permissions to suspected addresses. The low detection rate suggests evasion via timing or targeted distribution, increasing exposure risk for Livepeer ecosystem participants. PhishDestroy continues monitoring and will escalate to CERT teams and browser vendors for takedown. Remaining risk is elevated due to untracked propagation across social media and forum spam, warranting heightened vigilance among Livepeer users.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 216.150.1.129

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/276054a0-5550-47a4-9779-7ef06c72fb06
- PhishDestroy: https://phishdestroy.io/domain/www.livesetup.live/
- LLM endpoint: https://phishdestroy.io/domain/www.livesetup.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.livesetup.live/
Last updated: 2026-03-24