kuccoenlogiin[.]webflow[.]io

The domain kuccoenlogiin.webflow.io is currently identified as engaging in brand impersonation, specifically targeting KuCoin. This domain is categorized under an elevated risk level and remains active as of the latest analysis. The site appears to mimic KuCoin's login interface, potentially deceiving users into divulging sensitive login credentials.

Technical assessment reveals that the domain is hosted on IP address 172.64.151.8, registered through MarkMonitor, Inc. Despite its creation date of May 08, 2013, recent activities have raised significant security concerns. The domain has been flagged for phishing by 17 out of 95 security vendors on VirusTotal. Additionally, this domain is blocked by two known security blocklists, including PhishDestroy and PhishingDB. SSL certification is provided by Google Trust Services / WE1, and the domain is backed by infrastructure associated with Cloudflare, Inc. under AS13335, located in the United States.

Given the active impersonation threat, users are advised to approach this domain with caution. The presence on multiple blocklists, combined with a substantial detection count on VirusTotal, underscores the potential risk to users. It is recommended to avoid entering credentials or personal information on this site. Users should verify KuCoin login pages by manually entering URLs into their browsers, ensuring direct access to official platforms. Regularly monitoring account activity and enabling two-factor authentication could further mitigate risks associated with phishing attempts.