kuqkoonnlogo[.]webflow[.]io

This domain, kuqkoonnlogo.webflow.io, is flagged for brand_impersonation targeting Ethereum cryptocurrency users. Analysis indicates the site mimics the KuCoin exchange, presenting a page title of 'KuCoin - Crypto Exchange | Bitcoin Exchange | Bitcoin Trading.' The campaign appears designed to deceive users into disclosing credentials or transferring assets under false pretenses, though no explicit drainer kit signatures have been confirmed at this time.

Infrastructure analysis reveals the domain resolves to IP address 172.64.151.8, hosted on Cloudflare infrastructure (AS13335) in the United States. The domain was registered on May 08, 2013, through MarkMonitor, Inc., a registrar commonly associated with legitimate corporate domains. Detection metrics show 20 out of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on two independent security blocklists. The SSL certificate is issued by Google Trust Services (WE1), providing a superficial layer of legitimacy. Google Safe Browsing status remains unconfirmed in the available data.

The domain remains active as of this analysis, with elevated risk due to its persistent impersonation of a major cryptocurrency exchange. Response actions by security providers include blocking by PhishDestroy and PhishingDB, though user exposure may persist through unfiltered channels. Remaining risk is classified as elevated due to the domain's long-standing registration and the use of reputable infrastructure to evade detection. Users are advised to verify exchange URLs directly through official sources and employ multi-factor authentication to mitigate credential theft risks.