ku-coinlugiin[.]webflow[.]io

The domain ku-coinlugiin.webflow.io is flagged as a high‑risk brand‑impersonation site targeting KuCoin. Infrastructure analysis shows the site resolves to IP 104.18.36.248, hosted in Canada and serviced by Cloudflare, Inc. The domain was registered on April 01 2026 through Webflow and presents a valid SSL certificate issued by Google Trust Services (WE1). An HTTP request returns status 200, and the page title captured is "KuCoin: *%Log In | Register & Login Issues," confirming the intended brand spoof. Reputation data indicates a Gridinsoft trust score of 0/100 and the domain appears on one security blocklist. VirusTotal scans report 18 of 94 security vendors flagging the domain, and PhishDestroy has already blocked it. The site is currently active. While the page content beyond the title has not been examined, the combined evidence—brand‑specific title, low trust score, multiple vendor detections, and existing blocklist entries—strongly suggests a phishing operation. Defenders should immediately block the domain at network perimeter and endpoint controls, add it to internal threat intelligence feeds, and alert users to avoid any login prompts referencing KuCoin from this URL. Continuous monitoring for related Webflow‑hosted identifiers is recommended, as the attacker may reuse the same hosting platform for future impersonation campaigns.