qcuoinlugin[.]webflow[.]io

The domain qcuoinlugin.webflow.io was registered on February 21, 2026 through NameCheap, Inc. and is hosted behind Cloudflare’s network (ASN 13335) with the public address 172.64.151.8, which resolves to a location in the United States. The site presented an HTTP 403 response at the time of analysis, indicating that direct content retrieval was blocked or the page was taken offline. The only visible artifact is the page title "Ku𝐂oin* Login - Guide Easy Steps to Access Your Account," which aligns with the observed scam type of credential phishing. Technical fingerprints show the use of Webflow as the site‑builder, Cloudflare as the CDN, and HTTP/3 transport.

TLS termination is provided by Google Trust Services under the WE1 certificate, confirming that the connection is encrypted but does not imply legitimacy. The domain appears on one public blocklist, specifically PhishDestroy, and has been flagged by 16 of 93 security vendors on VirusTotal, reflecting moderate detection consensus. No additional intelligence such as malware payloads, phishing kits, or compromised credentials has been published, and the page content beyond the title has not been captured.

Given the combination of a recent registration, Cloudflare‑hosted infrastructure, a credential‑phishing title, and multiple vendor detections, defenders should treat the domain as malicious. Recommended actions include adding the domain and its resolving IP address to outbound and inbound blocklists, monitoring for any resurgence of the site, and updating URL filtering rules in web gateways. Continuous observation of the associated IP range and periodic re‑scans on VirusTotal are advised to capture any future activity.