kuucoinnus[.]webflow[.]io

This domain, kuucoinnus.webflow.io, poses as a legitimate cryptocurrency trading platform to deceive users into disclosing login credentials, private keys, or transferring digital assets. The site mimics KuCoin, a well-known exchange, by using visually similar branding, typography, and page structure. Analysis of the page title, 'K𝓾̲Cɵin lɵgi𝔫- A well #established crypto trading excha𝔫ge,' reveals intentional character substitution to evade text-based detection while maintaining visual similarity to the legitimate KuCoin login portal. Such tactics are commonly employed in phishing campaigns targeting cryptocurrency users, where stolen credentials can lead to immediate and irreversible financial loss. Infrastructure analysis confirms the domain's malicious intent. The domain was registered through Webflow on March 07, 2026, and resolves to the IP address 172.64.151.8, hosted on Cloudflare's network (AS13335). At the time of assessment, 21 out of 95 security vendors on VirusTotal flagged the domain as malicious, with detections including phishing, fraud, and credential theft. The domain appears on at least one security blocklist and is currently offline, though historical activity suggests it may have been operational long enough to target unsuspecting users. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing domains frequently use valid certificates to appear legitimate. Users who visited kuucoinnus.webflow.io or interacted with its content should take immediate action to mitigate potential compromise. First, revoke any active sessions on legitimate cryptocurrency platforms and change passwords using a secure device. Enable multi-factor authentication (MFA) if not already active. Monitor account activity for unauthorized transactions, particularly withdrawals or transfers of digital assets. If credentials or private keys were entered, assume they are compromised and transfer funds to a new, secure wallet. Report the incident to the legitimate exchange (KuCoin) and relevant cybersecurity authorities. Given the elevated risk level, affected users should also scan their devices for malware, as phishing sites may distribute additional payloads.