kucoin-lgn-web[.]pages[.]dev

As of July 25, 2026, the domain kucoin-lgn-web.pages.dev is confirmed to be a crypto scam impersonating the brand KuCoin. The domain was registered through Cloudflare, Inc. and first appeared on February 21, 2026. Infrastructure analysis reveals that it resolves to the IP address 172.66.47.69, which is located in the United States and is managed by Cloudflare, Inc. (AS13335). The nameservers for this domain are damian.ns.cloudflare.com and elisa.ns.cloudflare.com. The domain currently returns an HTTP status code 403, indicating that it is taken offline or inaccessible.

The page title, as seen when the domain was active, was 'Suspected phishing site | Cloudflare.' This title aligns with the security community's suspicion and provides a clear indication of the domain's malicious intent. Security assessments from Scamadviser and Gridinsoft are notably low, with trust scores of 1/100 and 0/100 respectively, further confirming the domain's suspicious nature. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy, a reputable security service. Out of 93 security vendors on VirusTotal, 15 flagged the domain as malicious. The SSL certificate used by this domain is issued by Google Trust Services, which may have been used to lend a false sense of security to potential victims.

Technologies detected on this domain include HSTS, Cloudflare, and HTTP/3, which can be used to improve the site's credibility and make it appear more legitimate. Despite the domain being currently offline, it remains a significant threat as it can be reactivated at any time. Defenders are advised to monitor for any reactivation and to ensure that users are aware of the risks associated with visiting domains that impersonate well-known brands like KuCoin. Additionally, adding this domain to internal threat lists and educating users about the importance of verifying the authenticity of websites, especially those related to cryptocurrency, is recommended.