kuccoinlguin[.]webflow[.]io

This domain, kuccoinlguin.webflow.io, poses a credential harvesting threat by impersonating the official KuCoin cryptocurrency exchange login portal. The site displays a fraudulent login interface under the page title 'Ku𝐂oin^* Login Guide - Easy Steps to Access Your Account,' designed to deceive users into entering their account credentials. Analysis indicates the domain specifically targets KuCoin users, likely through phishing campaigns distributing links via email, social media, or malicious advertisements. The site mimics the legitimate platform's branding, increasing the likelihood of successful credential theft for subsequent account takeover or unauthorized fund transfers. Infrastructure analysis reveals the domain was registered on April 12, 2026, through Webflow, a platform commonly used for rapid website deployment. It resolves to the IP address 104.18.36.248 and employs Cloudflare's CDN, along with HTTP/3 protocol and jQuery for dynamic content. The domain is flagged by 15 out of 95 security vendors on VirusTotal, and appears on one security blocklist. Its SSL certificate is issued by Google Trust Services, providing a false sense of security to potential victims. The use of Webflow's infrastructure and Cloudflare's services suggests an attempt to evade detection and takedown efforts. Users who visited kuccoinlguin.webflow.io or entered credentials on the site should immediately take corrective action. First, change the password for the affected KuCoin account and enable multi-factor authentication if not already active. Monitor the account for unauthorized transactions or suspicious activity, and report any anomalies to the legitimate platform's support team. Additionally, scan the device used to access the site for malware, as phishing pages may distribute secondary payloads. If financial loss occurred, contact relevant authorities to report the incident. Avoid interacting with unsolicited links or messages claiming to be from KuCoin, and verify domain authenticity before entering credentials.