kucoin-webapp[.]pages[.]dev

PhishDestroy identifies the domain kucoin-webapp.pages.dev as an active brand impersonation phishing campaign targeting KuCoin users with a crypto drainer payload. The campaign remains under investigation as of seed 67595b, with infrastructure actively resolving to malicious endpoints. The domain is not yet flagged by automated threat intelligence systems, indicating a rapidly evolving threat vector requiring immediate user caution. This domain was flagged by 9 of 95 VirusTotal vendors at time of analysis, exhibiting a 0% detection rate despite clear malicious intent. It is registered through Cloudflare, Inc., resolves to IP 188.114.97.3, and utilizes a Google Trust Services SSL certificate to enhance perceived legitimacy. The domain is hosted on Cloudflare Pages, a common tactic for phishing campaigns due to the service’s widespread trust and rapid deployment capabilities. Current status indicates active operation, with no current blocklist presence detected. PhishDestroy recommends users avoid this domain entirely and verify any KuCoin-related links using the PhishDestroy verification system before engagement. Users who have recently interacted with this domain should revoke any wallet approvals, transfer funds to a new wallet, and monitor accounts for unauthorized transactions. Report this domain via PhishDestroy to aid in takedown efforts and prevent further victimization.