# kocoinuinlogin.webflow.io — MALICIOUS

> kocoinuinlogin.webflow.io is a live Coinbase credential phishing page hosted on Webflow. 20/95 security engines detected it—do not enter credentials; block and.

## Summary
PhishDestroy identifies kocoinuinlogin.webflow.io as an active credential-phishing domain designed to harvest Coinbase login details. The page masquerades as a legitimate Coinbase login interface to trick users into surrendering credentials. This elevated-risk site is currently live and should be treated as hostile.

This domain was flagged by 20 of 95 participating VirusTotal engines based on confirmed phishing behavior. It resolves to IP 104.18.36.248, is served over TLS via a Google Trust Services certificate, and is hosted on Webflow’s infrastructure. Although the certificate is valid, the content is malicious, demonstrating that SSL alone does not guarantee safety.

Users should block kocoinuinlogin.webflow.io at the firewall or hosts file and avoid all links to the domain. If credentials were entered, rotate the exposed password immediately, enable multi-factor authentication on the legitimate Coinbase account, and revoke any unauthorized sessions. Report the domain to your security team and via PhishDestroy’s submission portal to aid collective defense.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248

## Detection Status
- VirusTotal: 20 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a87be63c-c83b-420f-a35e-35b11cb59b28
- PhishDestroy: https://phishdestroy.io/domain/kocoinuinlogin.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/kocoinuinlogin.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kocoinuinlogin.webflow.io/
Last updated: 2026-03-21