kucoinlgiunn[.]webflow[.]io

This domain, kucoinlgiunn.webflow.io, is flagged as a brand impersonation threat targeting KuCoin, a prominent cryptocurrency exchange platform. Analysis indicates the infrastructure was designed to mimic legitimate KuCoin services, likely to facilitate credential theft or fraudulent transactions. The page title, "404 - Page not found," suggests the domain may have been taken offline or repurposed after initial malicious use, though residual indicators remain active in security databases.

Infrastructure analysis reveals the domain was created on March 26, 2026, and is registered through Webflow. It resolves to the IP address 172.64.151.8, hosted on Cloudflare infrastructure in Canada. The SSL certificate is issued by Google Trust Services (WE1). Security vendors on VirusTotal flagged the domain at a ratio of 13/95, while it appears on one security blocklist, specifically PhishDestroy. No Google Safe Browsing (GSB) detections were recorded at the time of analysis.

Currently, the domain is offline, and the page returns a 404 error, indicating it may have been disabled or abandoned. However, the residual risk persists due to its prior association with brand impersonation and its presence on security blocklists. Organizations and users are advised to monitor for any resurgence of activity, particularly under similar subdomains or newly registered domains mimicking KuCoin. Blocking the domain and its associated IP at the network level is recommended to mitigate potential future threats.