kkuucooinloagin[.]webflow[.]io

As of July 23, 2026, the domain kkuucooinloagin.webflow.io has been confirmed as a credential phishing site. Analysis indicates that the domain was registered on March 05, 2026, and is associated with the registrar MarkMonitor, Inc. The domain resolves to an IP address located in the United States, specifically 104.18.36.248, which is part of the Cloudflare, Inc. network (AS13335). The page title for this domain is 'Ku𝐂oin* Login - Guide Easy Steps to Access Your Account', suggesting an attempt to mimic the KuCoin cryptocurrency exchange.

The domain is currently offline, returning an HTTP 404 status code. It appears on one security blocklist and is blocked by PhishDestroy. The SSL certificate for the domain is issued by Google Trust Services, indicating the use of a reputable certificate authority, which can sometimes lend a false sense of security to unsuspecting users.

The exact content of the site has not been analyzed, but the page title and the domain's classification as a credential phishing site suggest that it was likely used to trick users into providing their login credentials. Defenders should be cautious of any communications directing to this domain and should ensure that their network and endpoint security measures are updated to block access to kkuucooinloagin.webflow.io. Additionally, monitoring for and educating users about similar domain names and phishing tactics can help prevent future incidents.