kuuykoinlogin[.]webflow[.]io

kuuykoinlogin.webflow.io has been identified as an active credential phishing site impersonating Koinly wallet services. This domain poses an elevated risk to users by attempting to harvest login credentials under the guise of a legitimate cryptocurrency portfolio tracker. As of the latest analysis, this domain resolves to IP 104.18.36.248 and has been flagged for its malicious intent.

PhishDestroy identifies kuuykoinlogin.webflow.io as an elevated-risk credential phishing domain targeting unsuspecting users with a spoofed Koinly wallet login interface. This domain was flagged by 20 out of 95 security vendors on VirusTotal, placed on one active blocklist, and is already blocked by OpenPhish. The domain is hosted on IP 104.18.36.248 and secured with a Google Trust Services SSL certificate, demonstrating an attempt to appear legitimate. While domain registration details such as creation date and registrar are not disclosed here, the combination of high detection rates, active blocking, and deceptive branding confirms its malicious nature. The use of Google Trust Services for SSL issuance is a common tactic to bypass user suspicion.

This threat targets individuals seeking to access their Koinly wallet, potentially exposing cryptocurrency portfolio data and associated login credentials to threat actors. Credential theft from this domain could lead to unauthorized access, financial loss, or identity theft. Users who have entered credentials on this domain should immediately change their Koinly password and enable two-factor authentication. Avoid interacting with this domain entirely. Organizations and users are advised to block kuuykoinlogin.webflow.io at the network level and report it to relevant cybersecurity authorities. Always verify URLs and use official login portals to prevent falling victim to similar credential phishing attacks.