kuucoinaloginw[.]webflow[.]io

This report details a malicious domain, kuucoinaloginw.webflow.io, designed to impersonate the legitimate cryptocurrency exchange KuCoin. The page title, "Kucoin @ Login: Accessing Your Kucoin Account - Webflow," and the brand impersonation indicate the site was a phishing or credential-harvesting portal. The primary threat is the theft of cryptocurrency account credentials, potentially leading to unauthorized access and financial loss.

Technical analysis reveals a VirusTotal detection rate of 15 out of 95 security vendors, with specific flags from ADMINUSLabs, alphaMountain.ai, CyRadar, ESET, and Emsisoft. The domain is listed on one blocklist. It was registered through NameCheap, Inc. and created on February 21, 2026. The domain resolves to IP address 172.64.151.8, located in the United States and hosted by AS13335 Cloudflare, Inc. The site uses an SSL certificate issued by Google Trust Services (WE1), providing a false sense of security.

The domain is currently reported as DOWN or OFFLINE, and GridinSoft assigns a trust rating of 0 out of 100. Despite being inaccessible, the risk level remains high due to the confirmed impersonation of a major cryptocurrency platform and the high detection rate by security vendors. Users who may have interacted with this site prior to its takedown should consider their KuCoin credentials compromised.