cucoin-in[.]pages[.]dev

PhishDestroy identifies cucoin-in.pages.dev as an active crypto drainer impersonating the CuCoin cryptocurrency exchange. This domain is designed to trick users into connecting their wallets or entering credentials, enabling direct asset theft. The page operates under Cloudflare’s infrastructure, resolving to IP 188.114.96.3, and leverages a Google Trust Services SSL certificate to appear legitimate. Threat actors often deploy such domains in phishing campaigns targeting crypto users, particularly during periods of high trading activity or exchange promotions. This domain was flagged by PhishDestroy with a VirusTotal detection rate of 12/95 as of the latest scan, indicating it has not yet been widely recognized by security vendors. It is registered through Cloudflare, Inc., a common choice for threat actors due to its anonymity protections and rapid deployment capabilities. The domain is hosted on Cloudflare’s infrastructure, which obscures the true origin and complicates takedown efforts. Given the lack of immediate detection, users should exercise extreme caution when encountering links or advertisements promoting CuCoin or similar exchanges. If you visited cucoin-in.pages.dev, disconnect any connected wallets immediately, revoke any unauthorized permissions, and scan your device for malware. Do not enter any credentials or approve transactions if prompted. Report the domain to your security team or platforms like PhishDestroy for further analysis. Enable multi-factor authentication on all crypto exchange accounts and use hardware wallets for added security. Stay vigilant for future campaigns impersonating CuCoin or other exchanges.