kuaakawinlogi[.]webflow[.]io

The domain kuaakawinlogi.webflow.io has been identified as a brand impersonation threat targeting the cryptocurrency exchange KuCoin. This phishing domain was designed to deceive users into revealing their login credentials through a fraudulent step-by-step login guide. The domain was registered on March 07, 2026, through Webflow, and resolved to IP address 104.18.36.248. Its SSL certificate was issued by Google Trust Services (WE1), lending a false sense of legitimacy to the malicious site.

From a technical standpoint, this domain exhibits multiple red flags. VirusTotal analysis shows that 19 out of 95 security vendors flag this domain as malicious, indicating broad industry recognition of its threat. It appears on one security blocklist, which is relatively low but consistent with a recently created domain. The SSL certificate's association with Google Trust Services does not validate the site's authenticity, as cybercriminals increasingly use legitimate certificate authorities to host their phishing pages. The page title, "Step-by-Step Guide to KuCoin Login," was crafted to mimic official KuCoin support content, increasing the likelihood of user deception.

Currently, the domain is offline, suggesting that either the hosting provider or law enforcement has taken it down. However, the risk remains, as similar phishing campaigns often resurface under different domain names. PhishDestroy advises users to always verify the authenticity of any site claiming to be KuCoin by navigating directly to the official website and never clicking on links in unsolicited messages. Users who may have interacted with this domain should change their KuCoin passwords immediately and enable two-factor authentication to protect their accounts. The domain's unique seed (3988ac) has been logged for tracking purposes, and continuous monitoring is recommended to detect any future variations of this threat.