oauth---sso--m--kucoinn-auth[.]webflow[.]io

This report analyzes the domain oauth---sso--m--kucoinn-auth.webflow.io. Based on the page title "Kucoin™ (Official Site | en-US)® Kucoin Login" and the identified scam type, this site is a phishing page designed to impersonate the KuCoin cryptocurrency brand. The threat it poses is credential theft; it attempts to trick users into entering their KuCoin login credentials, which attackers could then use to access and drain cryptocurrency wallets.

Technical evidence confirms the malicious nature of this domain. VirusTotal reports 18 detections out of 95 security vendors. The domain is registered with NameCheap, Inc., was created on 2026-02-21, and resolves to IP address 104.18.36.248 in the United States, hosted by AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. It is flagged by multiple security vendors including ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and Ermes, and appears on one blocklist. GridinSoft trust rating is 0 out of 100.

The site is currently DOWN or OFFLINE. The risk level is high for any user who encountered the site while it was active, as it directly targets KuCoin account credentials. Users who interacted with this site should immediately change their KuCoin passwords and enable two-factor authentication.