# kucoiin-logein.webflow.io — MALICIOUS

> kucoiin-logein.webflow.io is actively used for phishing scams. Learn how this site operates and protect your data from fraud now.

## Summary
PhishDestroy identifies kucoiin-logein.webflow.io as an active phishing domain designed to deceive users into revealing sensitive information such as login credentials or financial data. This type of threat poses significant risks including identity theft and financial loss. Users encountering this domain should exercise extreme caution as it impersonates legitimate services to exploit unsuspecting victims.

The domain kucoiin-logein.webflow.io resolves to the IP address 104.18.36.248 and is hosted on the Webflow platform, which is frequently abused by attackers to create convincing phishing pages rapidly. VirusTotal analysis indicates that 20 out of 95 security vendors currently flag this domain as malicious, underscoring its high-risk status. The domain’s structure and naming closely mimic genuine cryptocurrency exchange login pages, aiming to lure users into entering sensitive login information.

Users are strongly advised not to visit this site or enter any personal details if they arrive there accidentally. It is recommended to verify URLs carefully before providing credentials and to use multifactor authentication on sensitive accounts where possible. Reporting this domain to your security provider can help block access and protect others. Staying vigilant and informed is crucial in defending against these sophisticated phishing threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: ꝄuCoin® ℓoℊin - A Step-by-tep Guide to Access Your Account

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.36.248
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 19 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "MalwareURL", "Netcraft", "OpenPhish", "Sophos", "Trustwave", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: KuCoin login is the initial step that grants users access to a wide range of services and functionalities on the KuCoin cryptocurrency exchange platform.

### Page Text
ꝄuCoin® ℓoℊin - A Step-by-tep Guide to Access Your Account ꝄuCoin® ℓoℊin - A Step-by-tep Guide to Access Your Account

### External Scripts
- https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
- https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=651cf7953d423485776493af
- https://cdn.prod.website-files.com/651cf7953d423485776493af/js/webflow.24a563ff7.js

### External Links
- https://teleedlescestable.com/b2945af1-d363-4ea1-b944-ae5467f80a53

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc27e-c285-7363-a97a-4193dca1ec02.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/kucoiin-logein.webflow.io
- Wayback Machine: https://web.archive.org/web/https://kucoiin-logein.webflow.io
- PhishDestroy: https://phishdestroy.io/domain/kucoiin-logein.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/kucoiin-logein.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kucoiin-logein.webflow.io/
Last updated: 2026-03-16