kanavabot[.]pages[.]dev

PhishDestroy identifies kanavabot.pages.dev as an active crypto drainer website currently distributing malicious payloads to unsuspecting users. This domain leverages Cloudflare Pages to host a convincing fake interface designed to trick visitors into connecting crypto wallets, thereby draining funds under the guise of a legitimate service. The threat is elevated due to the live status of the domain and the specificity of its attack vector targeting cryptocurrency users. This domain was flagged by 1 out of 95 VirusTotal security vendors, registered through Cloudflare, Inc., and resolves to IP address 188.114.96.3. While no creation date is publicly available, the use of Cloudflare Pages indicates recent deployment. The low detection rate suggests this campaign may be newly launched or employs evasion techniques to bypass traditional security measures. Trust scores are likely compromised due to the association with known crypto-draining infrastructure. Users should avoid interacting with kanavabot.pages.dev entirely. Before connecting any wallet or entering credentials, verify the legitimacy of the service on PhishDestroy. Enable wallet allowlisting and disable browser extensions temporarily if a connection attempt is made. Report any suspicious transactions immediately to the relevant blockchain explorer and platform support. Always cross-reference URLs with official sources using direct (typed) navigation.