kucinlogein[.]webflow[.]io

This domain, kucinlogein.webflow.io, is a fraudulent website designed to impersonate the official KuCoin cryptocurrency exchange login portal. Its primary threat is credential harvesting, where attackers trick users into entering their account credentials, which are then captured for unauthorized access to cryptocurrency wallets or trading accounts. The site may also distribute malware or initiate phishing attacks via embedded links or fake security prompts. Users who interact with this domain risk financial loss, identity theft, or further exploitation through follow-up social engineering attacks. Analysis indicates this domain was created on May 8, 2013, though its malicious use appears recent. It is flagged by 17 out of 95 security vendors on VirusTotal, including detections for phishing and brand impersonation. The domain resolves to the IP address 104.18.36.248, hosted on Cloudflare infrastructure (AS13335), a common tactic to obscure the true origin of malicious sites. It is registered through MarkMonitor, Inc., and its SSL certificate is issued by Google Trust Services, which does not validate legitimacy. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and its page title explicitly mimics the official KuCoin login portal with the phrase 'KuCoin Login & Access Your Account !'. If you visited kucinlogein.webflow.io, immediate action is required to mitigate risk. First, do not enter any credentials or personal information. If you submitted login details, assume your KuCoin account is compromised and initiate an account recovery process through the official KuCoin website. Change passwords for any accounts using the same or similar credentials, and enable multi-factor authentication where available. Monitor your cryptocurrency wallets and financial accounts for unauthorized transactions. Scan your device for malware using updated security tools, as phishing sites may deploy malicious payloads. Report the incident to KuCoin’s official support channels and consider filing a complaint with relevant cybersecurity authorities or fraud reporting platforms.