kucoin-login[.]webflow[.]io

PhishDestroy security analysts have identified kucoin-login.webflow.io as an active crypto brand impersonation site currently targeting users of the KuCoin cryptocurrency exchange. This domain masquerades as the legitimate KuCoin login portal in an attempt to harvest user credentials and potentially drain digital assets. The site remains online and poses an elevated risk to anyone who encounters it through phishing emails, social media, or search results.

Technical analysis reveals that the domain was registered on March 12, 2026 through Webflow, a legitimate website builder platform commonly abused by threat actors. It resolves to the IP address 172.64.151.8 and is secured with a TLS certificate issued by Google Trust Services under the WE1 pool, lending a false sense of legitimacy. VirusTotal data shows that 20 out of 95 security vendors flag this domain as malicious, and it currently appears on one security blocklist. Despite these indicators, the site remains accessible and continues to serve a convincing replica of the KuCoin login page.

Given the active status and elevated risk level, PhishDestroy strongly advises users to avoid interacting with kucoin-login.webflow.io under any circumstances. Do not enter login credentials, API keys, or any personal information on this site. If you have already done so, immediately change your KuCoin account password, enable two-factor authentication, and contact KuCoin support to secure your account. Report the domain to Webflow and relevant cybersecurity authorities to help takedown efforts.