kuconlgan[.]webflow[.]io

PhishDestroy has identified kuconlgan.webflow.io as a confirmed brand impersonation site specifically targeting the KuCoin cryptocurrency exchange. This domain is currently offline, having been taken down following its detection. The site was designed to deceive KuCoin users into believing they were accessing a legitimate login portal, as evidenced by its page title "KuCoin Login: How to Access Your Account Easily."

Analysis of the domain reveals significant red flags. VirusTotal flagged the domain with 18 out of 95 security vendors, indicating broad consensus on its malicious nature. The domain was registered through NameCheap, Inc. and created on February 21, 2026, a very recent registration. It resolves to IP address 172.64.151.8 and uses an SSL certificate from Google Trust Services (WE1), which is common for legitimate sites but here used to lend false credibility. The domain appears on one security blocklist, further confirming its threat status.

Because the site is now offline, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that KuCoin users always verify the official URL (kucoin.com) before entering login credentials or sensitive information. Be cautious of unsolicited links or search results leading to login pages. Enable two-factor authentication and monitor accounts for unauthorized activity. Report any suspicious domains to security teams and blocklist providers to protect the broader community.