kucoienalogie[.]webflow[.]io

The domain kucoienalogie.webflow.io is identified as a brand-impersonation threat targeting KuCoin, a cryptocurrency exchange platform. Analysis indicates this domain was designed to deceive users into believing it is the legitimate KuCoin site, facilitating credential theft or unauthorized transactions. The domain is currently offline, but prior activity warrants caution. Infrastructure analysis reveals the domain resolved to IP address 104.18.36.248, hosted on Cloudflare infrastructure (AS13335). It was flagged by 18 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. The domain was registered through MarkMonitor, Inc., and its SSL certificate was issued by Google Trust Services (WE1). The page title mirrored the legitimate KuCoin site, furthering its deceptive intent. The domain appeared on one security blocklist and was created on March 07, 2026, suggesting a short-lived but targeted campaign. As of this report, kucoienalogie.webflow.io has been taken offline. However, users who may have interacted with the domain should immediately revoke any active sessions, reset credentials, and monitor accounts for unauthorized activity. Organizations should update blocklists to include this domain and its associated IP address. Vigilance is advised for similar impersonation attempts, particularly those leveraging cloud-based hosting platforms for evasion.