xn--kuoin-lgin-mbb8u[.]webflow[.]io

Analysis of the domain xn--kuoin-lgin-mbb8u.webflow.io indicates that it poses a significant threat as a generic phishing site. The domain was designed to mimic the login page of a legitimate service, potentially targeting users of a platform resembling Kućoin. By impersonating a trusted brand, the domain aims to steal sensitive information such as usernames, passwords, and possibly financial details from unsuspecting visitors.

This domain is flagged by 18 out of 95 security vendors on VirusTotal, indicating a notable level of concern within the security community. The domain was registered through Webflow and created on March 26, 2026. It resolves to the IP address 104.18.36.248, which is located in California and is associated with Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, which might contribute to a false sense of security among users. The domain appears on one security blocklist, specifically PhishDestroy, and is currently offline.

If users have visited xn--kuoin-lgin-mbb8u.webflow.io, it is recommended that they immediately change their passwords for any accounts where they may have entered login credentials. Additionally, users should monitor their financial statements for any unauthorized transactions and consider enabling two-factor authentication on their accounts. Reporting the incident to the security team of the platform they believe was being impersonated is also advised to help mitigate the impact of this threat.