kuecoinlogon[.]webflow[.]io

Analysis of kuecoinlogon.webflow.io shows an active infrastructure deliberately targeting KuCoin users. The domain was registered on March 03, 2026 through the Webflow platform and resolves to IP address 172.64.151.8, which belongs to Cloudflare (AS13335) in the United States. The site serves content over HTTPS using a Google Trust Services / WE1 certificate and supports HTTP/3, indicating a modern web stack. Page metadata contains the title "KuCoin *Login: Your Gateway to a World of Digital Assets," directly referencing the KuCoin brand and confirming a brand‑impersonation intent. The domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, reflecting a high likelihood of malicious use. VirusTotal scans report 18 of 94 security vendors flagging the domain, and PhishDestroy has already blocked it. The HTTP response code is 200, confirming that the site is reachable and serving content. While the exact page layout and payload have not been examined, the combination of brand‑specific title, low trust score, multiple vendor detections, and active hosting suggests a high‑risk crypto‑scam operation. Defenders should add the domain to URL filtering rules, monitor DNS queries for the associated IP, and educate users about unsolicited KuCoin login requests. Continuous observation is advised to detect any changes in hosting or content that could increase the threat surface.