kiwiwealthgrid[.]live

PhishDestroy confirms kiwiwealthgrid.live is an active wealth-themed phishing domain engineered to impersonate Kiwi Wealth’s genuine platform. The page is not merely a generic phishing lure; it lures visitors with fraudulent portfolio dashboards and fake “Kiwi Wealth Grid” branding in an attempt to harvest credentials and financial data. Because the lure is sector-specific and leverages the Kiwi Wealth reputation, the risk is elevated even though only one security vendor currently detects it. This domain was registered on May 11, 2026 via NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 188.114.96.3. VirusTotal reports 1 out of 95 security engines currently flagging the page, and the domain holds no established listings on major public blocklists or threat-intel feeds at this time. Despite the low vendor detection, the recent creation date and selection of a free Let’s Encrypt SSL certificate signal active provisioning by actors prepared for short-term campaigns. The registrar’s broader reputation does not immediately raise suspicion, though bulk registrations are common in phishing orchestration. Organizations and users should block kiwiwealthgrid.live at DNS and perimeter layers using the exact string provided. All traffic to 188.114.96.3 related to financial portals should be inspected for credential submission attempts. If credentials were entered, rotate passwords immediately, enable multi-factor authentication on the legitimate Kiwi Wealth portal, and report the incident to Kiwi Wealth fraud teams. Stay vigilant for new domains mimicking Kiwi Wealth, especially those created after May 2026.