kucnlogi[.]webflow[.]io

The domain kucnlogi.webflow.io was registered on March 02, 2026 and is hosted on the IP address 172.64.151.8, which belongs to Cloudflare, Inc. (AS13335) in the United States. The site presented the page title "KuCoin Login: How to Access Your Account Easily," indicating an attempt to impersonate the KuCoin cryptocurrency exchange. When accessed, the server returned an HTTP 404 status, and the domain is currently listed as offline. VirusTotal analysis recorded 17 detections out of 93 security vendors, confirming that a notable portion of the security community classifies the domain as malicious.

The domain appears on one public blocklist and has been explicitly blocked by the PhishDestroy service. Technical fingerprints show the use of Cloudflare’s CDN and HTTP/3 protocol, and the TLS certificate is issued by Google Trust Services under the WE1 root, which is typical for Cloudflare‑protected sites. The registrar information lists Cloudflare, Inc. as the registrar, aligning with the hosting provider.

The elevated risk rating reflects the combination of the targeted brand name in the page title, the detection count, and the presence on blocklists. Defenders should ensure that the domain is added to local deny lists, monitor the associated IP address for any future activity, and verify that any inbound traffic to Cloudflare‑derived IP ranges is inspected for similar impersonation attempts. Although the site is offline, the infrastructure details remain useful for attribution and for updating threat‑intelligence feeds to prevent recurrence.