kucoinlogingty[.]webflow[.]io

The domain kucoinlogingty.webflow.io, impersonating KuCoin, is flagged by 17 out of 93 VirusTotal vendors as malicious. This phishing site targeted cryptocurrency users, attempting to harvest login credentials under the guise of a legitimate KuCoin login page. The domain's page title, "KuCoin Login: Where Security Meets Seamless," was designed to lure users into a false sense of security.

Despite being taken down, the domain initially posed a significant threat due to its convincing mimicry of KuCoin's branding. Registered through NameCheap, Inc. and hosted on an IP managed by Cloudflare, Inc., the site leveraged reputable infrastructure to enhance its credibility. The SSL certificate issued by Google Trust Services further added to the facade of legitimacy, potentially deceiving even the more cautious users.

PhishDestroy's early detection of kucoinlogingty.webflow.io, three days before its official registration date, underscores the agility of our threat intelligence pipeline. By identifying threats in the critical pre-detection window, we can alert users to new phishing schemes before they propagate widely. This proactive approach is crucial in the fight against phishing, particularly in the fast-moving world of cryptocurrency scams.