kucoinelogie[.]webflow[.]io

The domain kucoinelogie.webflow.io was registered on March 06, 2026 through MarkMonitor, Inc. It resolves to IP address 104.18.36.248, which belongs to Cloudflare (AS13335) and is geolocated in the United States. The site delivers content over HTTPS using a certificate issued by Google Trust Services under the WE1 trust store, and the HTTP response code is 200. The observed page title is "Ku𝐂oin* Login - Guide Easy Steps to Access Your Account", indicating a direct impersonation of the KuCoin brand. VirusTotal analysis shows that 17 of 94 security vendors have flagged the domain. It appears on one public blocklist and is currently listed as blocked by PhishDestroy. The Gridinsoft trust score is 0/100 and the threat is categorised as a crypto scam. Infrastructure analysis reveals the use of a legitimate web‑hosting platform (Webflow) backed by Cloudflare’s CDN, which can obscure the true origin of the malicious content. No additional malicious infrastructure such as command‑and‑control servers or payloads has been identified, leaving the full operational scope of the campaign uncertain. Defenders should block the domain at perimeter firewalls, add the IP address 104.18.36.248 to deny‑list rules, and incorporate the indicator into email and endpoint security policies. Continuous monitoring for credential‑theft activity and rapid incident response are advised.