kukai-live[.]pages[.]dev

Analysis of kukai-live.pages.dev shows a recently registered site (creation date 27 May 2026) hosted on Cloudflare Pages. The domain resolves to IP 188.114.97.3, which belongs to Cloudflare, Inc. in Canada. TLS is provided by Google Trust Services under the WE1 certificate, indicating a valid HTTPS configuration. The page title returned by the server is "Kukai Wallet," matching the declared scam type of a crypto drainer. Independent scoring from Gridinsoft assigns a trust score of 0 / 100, and the domain is listed on a single security blocklist, currently blocked by PhishDestroy. HTTP response code is 200, confirming that the site is actively serving content. Virustotal reports that 91 scanners have examined the site without flagging malicious payloads, though the lack of detections does not confirm benign intent. The combination of a fresh domain, low trust score, targeted crypto‑wallet branding, and blocklist presence suggests a high likelihood of fraudulent activity aimed at extracting cryptocurrency assets. Defenders should block the domain at network perimeter, monitor DNS queries for the host, and enforce stricter validation of wallet‑related URLs. Ongoing observation is advised to detect any shift in behavior or additional indicators of compromise.