kucoienlogina[.]webflow[.]io

This domain, kucoienlogina.webflow.io, is a confirmed brand impersonation targeting the cryptocurrency exchange KuCoin. Registered through NameCheap, Inc. on February 21, 2026, the domain's page title explicitly claims to be 'KuCoin: Your Premier $ Crypto Exchange for Bitcoin Trading', a direct attempt to deceive users into believing they are interacting with the legitimate KuCoin platform. Security analysis reveals significant risk indicators. VirusTotal flags this domain as malicious by 16 of 93 security vendors, and it currently appears on one security blocklist.

The SSL certificate is issued by Google Trust Services (WE1), which provides encrypted communication but does not validate the domain's legitimacy. The domain resolves to IP address 172.64.151.8, located in the United States and hosted by Cloudflare, Inc. (AS13335), a common infrastructure provider for both legitimate and malicious sites. The Gridinsoft trust score is 0/100, reflecting a strong consensus of untrustworthiness. At the time of analysis, the domain returns an HTTP 404 status and has been taken offline, likely due to takedown actions by PhishDestroy or other security entities.

The exact content of the hosted page was not captured, but the page title and brand impersonation data confirm the threat. Defenders should ensure their systems block this domain and related subdomains on webflow.io, monitor for similar patterns (e.g., misspellings of 'KuCoin' with 'login' appended), and educate users to verify URLs carefully. Uncertainties include whether the phishing campaign is fully ceased or may reappear under different subdomains. Organizations should review access logs for any connections to this domain and consider implementing broader blocks on newly registered domains containing 'kucoin' variants.