kukkinlogun[.]webflow[.]io

This domain, kukkinlogun.webflow.io, poses as the official KuCoin cryptocurrency exchange login portal to deceive users into entering their account credentials. The page title, 'KuCoin Login - Access Your Account Easily,' mimics legitimate branding, while the underlying infrastructure is designed to capture and exfiltrate sensitive login details. Analysis indicates the site is actively targeting users seeking to access their KuCoin accounts, with the intent of unauthorized account access or financial theft. Infrastructure analysis reveals the domain is hosted on Webflow and resolves to the IP address 172.64.151.8, associated with Cloudflare, Inc. (AS13335). The site is flagged by 15 out of 95 security vendors on VirusTotal, and it appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend an appearance of legitimacy. No creation date is available, but the domain remains active and unblocked by most consumer security tools, increasing its potential reach. Users who have visited kukkinlogun.webflow.io or entered credentials on the site should immediately take action. First, change the password for the affected KuCoin account and enable multi-factor authentication if not already active. Next, monitor the account for unauthorized transactions or suspicious activity. If financial loss is suspected, report the incident to the relevant authorities and the targeted platform. Additionally, scan the device used to access the site for malware, as phishing pages may deploy additional payloads. Avoid interacting with the domain or any links associated with it to prevent further compromise.