# kukai-3i0.pages.dev — SUSPICIOUS

> PhishDestroy identifies kukai-3i0.pages.dev as a live crypto-wallet phishing page hosted on Cloudflare at 188.114.96.3 with 0/95 VirusTotal detections.

## Summary
This domain hosts a counterfeit login page mimicking the legitimate Kukai wallet interface, tricking users into entering private keys or recovery phrases into a fake form. Once submitted, the credentials are immediately harvested by attackers, granting them full control over victims’ crypto assets. The site is indistinguishable from the real service, making it especially dangerous for users who rely on browser bookmarks instead of typing URLs.  PhishDestroy confirmed this site is active but undetected by 0 out of 95 VirusTotal engines, showing it remains under the radar. It is registered via Cloudflare, Inc. and secured with a Let’s Encrypt certificate to appear legitimate, while resolving to IP 188.114.96.3. The domain’s recent Cloudflare Pages deployment indicates an opportunistic campaign likely targeting users searching for wallet access points.  If you visited this page, stop using any credentials you entered immediately. Revoke access to all connected wallets via the official Kukai interface, transfer remaining funds to a new wallet created on the genuine site, and run a malware scan on your device. Report the domain to your browser’s safe-browsing program and avoid clicking similar links in future.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/kukai-3i0.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/kukai-3i0.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/kukai-3i0.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kukai-3i0.pages.dev/
Last updated: 2026-04-08