usdt-frontend-cku[.]pages[.]dev

PhishDestroy identifies usdt-frontend-cku.pages.dev as an active fake USDT wallet scam posing elevated risk to cryptocurrency users. The site mimics legitimate Tether wallet interfaces to harvest private keys and seed phrases through credential-harvesting forms. Visitors risk irreversible asset loss if they input wallet information, as the threat actor behind this domain operates under the guise of a trusted service while exfiltrating sensitive data to external servers.

This domain was flagged by 1 out of 95 VirusTotal security vendors, indicating minimal detection despite malicious intent. It is registered through Cloudflare, Inc. and resolves to IP address 172.66.44.111, which is part of Cloudflare’s edge network infrastructure. The domain uses a Let’s Encrypt SSL certificate, giving it the appearance of legitimacy, but no independent trust score or blocklist inclusion data is publicly available at this time.

To mitigate exposure to this scam, users should avoid accessing usdt-frontend-cku.pages.dev entirely. Never enter cryptocurrency wallet credentials, private keys, or seed phrases into web forms hosted on unfamiliar domains. Enable hardware wallet authentication, use bookmarked official URLs, and verify site certificates against known issuers. Report this domain to Cloudflare Trust & Safety and to relevant cryptocurrency scam databases to aid in wider detection and takedown efforts.