kkucoinn-i-en[.]webflow[.]io

The domain kkucoinn-i-en.webflow.io is a brand impersonation phishing site specifically targeting KuCoin users. This threat is classified as a crypto drainer, designed to capture login credentials and potentially drain cryptocurrency wallets. As of this report, the domain has been taken offline, but similar attacks may reappear under different domains.

Technical analysis reveals that this domain was registered through Webflow, a legitimate website builder, which allowed the attacker to quickly set up a convincing fake login page titled "KuCoin: Log In | Sign In." The domain resolves to IP address 104.18.36.248 and was created on April 1, 2026. VirusTotal data shows that 20 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. The SSL certificate is issued by Google Trust Services, providing a false sense of security to visitors. Trust scores are low due to the high vendor detection rate and the clear impersonation of KuCoin.

Given that the site is now offline, the immediate risk is mitigated. However, users should remain vigilant against similar phishing attempts. PhishDestroy recommends always verifying the legitimacy of any login page by checking the official URL directly from the company's website or app. If you have already entered credentials on this site, change your KuCoin password immediately and enable two-factor authentication. Report any suspicious domains to PhishDestroy for further analysis.