kinextixfinance[.]pages[.]dev

PhishDestroy has identified kinextixfinance.pages.dev as a crypto drainer phishing domain targeting users of the Kinetix Finance brand. This domain is currently offline, having been taken down after its malicious activity was detected. The site was designed to impersonate a legitimate decentralized finance platform, tricking visitors into connecting their wallets and ultimately draining their cryptocurrency assets. Its use of a generic .pages.dev subdomain, registered through Cloudflare, Inc., is a common tactic among phishing operations to appear somewhat legitimate while evading initial detection.

Technical analysis reveals that kinextixfinance.pages.dev was created on April 1, 2026, a very recent date consistent with a short-lived phishing campaign. The domain resolves to IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services (WE1), which provides a false sense of security to unsuspecting users. On VirusTotal, 2 out of 95 security vendors flagged the domain as malicious, and it appears on 4 security blocklists. While the detection rate is relatively low, the combination of brand impersonation and the specific crypto drainer threat type elevates the risk level to elevated. The domain's registration through Cloudflare and its use of a free hosting service further indicate its disposable nature.

Given that kinextixfinance.pages.dev is now offline, the immediate risk of wallet drainage has been mitigated. However, users who may have already interacted with the site should revoke any permissions granted to suspicious smart contracts and monitor their wallets for unauthorized transactions. PhishDestroy recommends avoiding any unsolicited links claiming to be from Kinetix Finance and always verifying official URLs through trusted sources. If any credentials or wallet connections were provided, change passwords and enable two-factor authentication immediately. Staying vigilant against similar crypto drainer campaigns is essential, as threat actors often reuse infrastructure under new domain names.