koquinlogin[.]webflow[.]io

Koquinlogin.webflow.io, a credential phishing site, mimics the KuCoin login page to deceive users into providing their credentials. PhishDestroy identifies this domain on its first day of creation, with 18 out of 94 VirusTotal vendors flagging it as malicious. The site is now offline, reducing its immediate threat.

The domain was registered through Webflow and hosted on an IP managed by Cloudflare, Inc., located in Canada. It used an SSL certificate issued by Google Trust Services, adding a layer of perceived legitimacy to unsuspecting users. The phishing page's title, "KuCōin® - Login: - Your Gateway to a World of Digital Assets," is designed to lure users into a false sense of security by imitating the official KuCoin branding.

Despite its current offline status, koquinlogin.webflow.io's initial detection underscores the importance of rapid identification and response to phishing threats. The domain's platform risk score of 78 out of 100 highlights its potential danger during its active period. PhishDestroy's early detection capabilities are crucial in capturing such threats before they propagate widely, leveraging the time gap before antivirus databases update their records. This proactive approach helps mitigate the risk posed by freshly registered malicious domains.