kucoiinloginus[.]webflow[.]io

This domain, kucoiinloginus.webflow.io, was registered on June 17, 2026 via the Webflow platform and presently resolves to the Cloudflare‑owned address 172.64.151.8 located in the United States (AS13335). The site presents the page title “KuCoin Login | Access Your Account Easily”, indicating a credential‑phishing campaign targeting KuCoin users. Infrastructure analysis shows the use of Webflow, jQuery, Cloudflare, and HTTP/3, and the TLS certificate is issued by Google Trust Services under the WE1 identifier, confirming a valid HTTPS connection. The domain carries a Gridinsoft trust score of 0/100, is listed on a single security blocklist, and has been blocked by PhishDestroy. VirusTotal scans report that 19 of 91 security vendors flag the domain as malicious. The HTTP response code is 200, confirming that the site is actively serving content. Current intelligence does not reveal the underlying phishing kit or additional hosting artifacts, and the nameserver data is unavailable. Defenders should add the IP address 172.64.151.8 and the fully qualified domain name to blocklists, monitor for related DNS queries, and enforce credential‑validation controls for KuCoin services. Continuous re‑assessment is advised as the campaign remains active and classified as high‑risk brand impersonation.