kucolnlogin[.]webflow[.]io

This domain, kucolnlogin.webflow.io, is flagged as a brand impersonation threat specifically targeting the Google brand. The domain attempts to deceive users by mimicking the look and feel of legitimate Google login pages, potentially leading to the theft of sensitive information such as usernames, passwords, and other personal data.

Infrastructure analysis reveals that kucolnlogin.webflow.io is registered through Webflow and resolves to the IP address 104.18.36.248, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. On VirusTotal, 18 out of 95 security vendors have flagged this domain as malicious. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy, indicating a high level of suspicion and potential risk.

If users have visited this domain, they are advised to immediately change their Google account passwords and enable two-factor authentication (2FA) to enhance security. Users should also monitor their accounts for any unauthorized activity and report the incident to Google’s security team. It is crucial to avoid entering any personal information on this or similar suspicious sites and to verify the URL and domain ownership before logging in to any account.