# kucoin-lgn-web.pages.dev — MALICIOUS

> The domain kucoin-lgn-web.pages.dev impersonates KuCoin and is flagged for phishing. Avoid interaction and rely on official sites only.

## Summary
PhishDestroy identifies kucoin-lgn-web.pages.dev as a high-risk brand impersonation targeting KuCoin users. Classified as a phishing threat, it aims to deceive victims into revealing sensitive information by mimicking KuCoin’s identity.

Technical analysis reveals the domain was registered on February 21, 2026, through Cloudflare, Inc. It resolves to IP 172.66.47.69 and is listed on one security blocklist. VirusTotal flags 15 out of 95 security vendors, confirming malicious intent.

This domain is currently offline, taken down likely due to security interventions. Users are advised to avoid this domain and always verify URLs to prevent credential compromise. PhishDestroy continues monitoring for related threats under seed 1bbad9.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: KuCoin
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.69
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["damian.ns.cloudflare.com", "elisa.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "Criminal IP", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Phishing Database", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b9ac2-847c-7359-8522-8b1c671de576.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/8d301ad2-f191-4fb6-8e34-db5b2cbe74bf
- PhishDestroy: https://phishdestroy.io/domain/kucoin-lgn-web.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/kucoin-lgn-web.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kucoin-lgn-web.pages.dev/
Last updated: 2026-03-19