kucionlgen[.]webflow[.]io

This domain, kucionlgen.webflow.io, is an active phishing site designed to impersonate the legitimate cryptocurrency exchange KuCoin. The site displays a fraudulent login page titled 'Ku𝐂oin* Login - Guide Easy Steps to Access Your Account,' which mimics the official KuCoin interface to deceive users into entering their credentials. Such impersonation attacks are commonly used to harvest sensitive account information, leading to unauthorized access, financial theft, or further exploitation of compromised accounts. Users who interact with this site risk exposing their login details, two-factor authentication codes, or other personal data to malicious actors. Analysis indicates this domain was created on May 8, 2013, though the phishing content appears to be a recent addition. The domain is registered through MarkMonitor, Inc., and resolves to the IP address 172.64.151.8, hosted on Cloudflare’s infrastructure (AS13335). Security vendors have flagged this domain in VirusTotal, with 17 out of 95 engines detecting malicious activity. Additionally, the domain appears on one security blocklist, further confirming its association with phishing operations. The SSL certificate is issued by Google Trust Services, which, while legitimate, is often leveraged by threat actors to lend a false sense of security to their fraudulent sites. Users who have visited kucionlgen.webflow.io or entered credentials on this site should take immediate action. First, cease all interaction with the domain and avoid clicking any links or downloading files from it. If login details were submitted, change the passwords for the affected KuCoin account and any other platforms where the same credentials may have been reused. Enable multi-factor authentication (MFA) if not already active, and monitor the account for unauthorized transactions or suspicious activity. Report the incident to the legitimate platform’s security team and consider notifying relevant authorities or cybersecurity organizations to aid in tracking and mitigating the threat.