kukoociinlogon[.]webflow[.]io

The domain kukoociinlogon.webflow.io has been identified as a credential phishing site impersonating KuCoin. Despite being offline now, it previously aimed to deceive users into entering their login credentials under the guise of a legitimate KuCoin login page. The site was flagged by 9 out of 91 vendors on VirusTotal, indicating a moderate level of detection by security tools.

Registered through MarkMonitor, Inc., and hosted on Cloudflare's infrastructure in the US, the domain leveraged a Google Trust Services SSL certificate. This setup might have lent the site an appearance of legitimacy to unsuspecting users. The phishing site was detected by PhishDestroy on June 21, 2026, and had a platform risk score of 68 out of 100, suggesting a significant threat level.

Phishing domains like kukoociinlogon.webflow.io exploit the initial period following domain registration, often bypassing antivirus detection during this window. PhishDestroy's early detection pipeline identifies such threats before they propagate through traditional antivirus databases. This domain's takedown mitigates immediate risk, but the incident underscores the importance of continuous monitoring and rapid response to emerging threats.