home-kucoen-eng[.]pages[.]dev

PhishDestroy identifies home-kucoen-eng.pages.dev as an active crypto drainer impersonating a trusted brand. This domain was flagged under generic phishing due to its malicious intent aimed at cryptocurrency theft. The site leverages Cloudflare Pages for hosting, which may obscure its true origin while providing a veneer of legitimacy through Google Trust Services' SSL certificate. With 5/95 detections on VirusTotal at the time of analysis, this domain remains undetected by many security tools, posing a stealthy threat to unsuspecting users.

This domain was flagged on seed b2f845 with the following intelligence: registered via Cloudflare, Inc., equipped with an SSL certificate issued by Google Trust Services, resolving to IP 188.114.96.3, and currently showing 5/95 VirusTotal detections. The domain is active and categorized under generic phishing, specifically targeting cryptocurrency users by impersonating a legitimate brand. Cloudflare’s infrastructure and Google’s SSL certificate may lend false credibility to the site, while the lack of VirusTotal detections indicates it has evaded widespread detection. The risk level remains under investigation but is considered active and dangerous.

To mitigate risks associated with crypto drainers like home-kucoen-eng.pages.dev, users should avoid interacting with unsolicited links or websites promising free cryptocurrency or urgent transactions. Verify URLs manually and use hardware wallets or reputable software for cryptocurrency transactions. Enable multi-factor authentication on all crypto-related accounts and monitor transactions for unauthorized activity. Report suspicious domains to relevant authorities or security platforms to help prevent further spread of this threat.