online-live[.]fun

PhishDestroy identifies online-live.fun as a live crypto drainer scam site designed to trick users into connecting cryptocurrency wallets and authorize malicious transactions that drain funds directly. This domain was flagged by security researchers due to its suspicious behavior of mimicking legitimate live streaming or financial platforms while covertly executing unauthorized wallet interactions. The site leverages social engineering tactics, such as fake giveaways or urgent prompts, to coerce victims into connecting their wallets under false pretenses, resulting in irreversible crypto theft. This domain was flagged based on multiple indicators: it was registered on March 28, 2026, through Registrar of Domain Names REG.RU LLC, and currently resolves to IP 104.21.65.47 with a free Let's Encrypt SSL certificate—common tools used by threat actors to appear legitimate. VirusTotal currently shows 1 out of 95 security engines detecting the threat, indicating this campaign remains under the radar and likely targets less security-aware users. The combination of recent creation, low detection rate, and use of a popular registrar and SSL provider highlights a deliberate effort to evade early detection. If you have visited online-live.fun, immediately disconnect your cryptocurrency wallet or revoke any unauthorized permissions through your wallet's settings or dashboard. Do not interact further with the site. Report the domain to your wallet provider, local cybersecurity agencies, and any cryptocurrency platforms you use. Enable two-factor authentication on all financial accounts and consider using hardware wallets for enhanced security. Stay alert to similar scams and only use trusted, verified platforms for crypto transactions.