krakenlog-ing[.]pages[.]dev

The domain krakenlog-ing.pages.dev is actively impersonating Kucoin to execute a cryptocurrency phishing scam. It has been flagged by 14 out of 93 vendors on VirusTotal, indicating a significant level of threat recognition. The site is also listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL, which underscores its malicious intent.

Registered through Cloudflare, Inc., and hosted on IP address 188.114.97.3 in the United States, this domain uses SSL certificates issued by Google Trust Services. The page title, "Kucoin Login - Secure Access to Your Crypto Account," is designed to lure users into entering their credentials, exploiting the trust users place in the Kucoin brand.

PhishDestroy detected this domain on the same day it was created, March 2, 2026, showcasing the effectiveness of our early detection pipeline. The platform risk score for this domain is a maximum 100/100, reflecting the high potential for harm. The domain's activity highlights the ongoing threat posed by phishing sites that exploit the brief window before antivirus vendors update their databases. This underscores the importance of proactive threat intelligence measures in combating such scams.