klicuon-login[.]webflow[.]io
“KuCoin Login: How to Access Your Account Easily”
klicuon-login.webflow.io — 内容不可用. 品牌冒充:KuCoin; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 14/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLScan malicious verdict; CF Radar malicious; PhishDestroy score 92/100. 注册商: MarkMonitor.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain klicuon-login.webflow.io was observed hosting a page titled "KuCoin Login: How to Access Your Account Easily," explicitly targeting the KuCoin brand. Registration records show the domain was created on May 08, 2013 and is managed by MarkMonitor, Inc., a registrar often used for legitimate brand assets. DNS resolution points to IP address 104.18.36.248, which belongs to AS13335 (Cloudflare, Inc.) located in the United States. The hosting provider supplies Cloudflare services, including HTTP/3 support, and the SSL certificate presented is issued by Google Trust Services under the WE1 label, indicating a valid TLS chain despite the malicious intent.
An HTTP request to the site returned a 404 status, and the domain is currently listed as taken offline. Security telemetry indicates that 14 of 95 VirusTotal scanners flagged the domain, and it appears on one external security blocklist. PhishDestroy has actively blocked the domain, confirming its classification as a crypto‑related brand‑impersonation scam. Nameservers listed are journey.ns.cloudflare.com and lamar.ns.cloudflare.com.
While the page title and registrar data provide clear evidence of brand impersonation, the actual page content has not been captured, leaving the precise phishing mechanics uncertain. Defenders should continue to block the domain and its resolving IP address, monitor for any resurgence of the host name or similar subdomains under the same Cloudflare infrastructure, and update detection signatures to include the observed page title and SSL fingerprint. Ongoing vigilance is recommended given the elevated risk rating and the potential for the infrastructure to be repurposed for future KuCoin‑related scams.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 2 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。