kucoenloginer[.]webflow[.]io
“KuCoin Login: Secure Access to Your Crypto Trading Account”
证据摘要
Analysis of the domain kucoenloginer.webflow.io indicates a confirmed brand impersonation targeting KuCoin, a cryptocurrency exchange. The domain was registered on February 21, 2026, through NameCheap, Inc., and hosted on Cloudflare infrastructure, resolving to IP 104.18.36.248 (AS13335, US). The page title, 'KuCoin Login: Secure Access to Your Crypto Trading Account,' explicitly mimics KuCoin’s official login portal, aligning with the reported scam type of a crypto scam. The domain is currently offline, returning an HTTP 404 status, and has been flagged by 18 of 93 security vendors on VirusTotal, as well as appearing on one security blocklist (PhishDestroy).
Infrastructure analysis reveals the use of Cloudflare nameservers (journey.ns.cloudflare.com, lamar.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1). Detected technologies include Webflow and HTTP/3, consistent with phishing campaigns leveraging legitimate web development platforms for rapid deployment. The Gridinsoft trust score of 0/100 further corroborates the malicious classification. While the domain is no longer active, defenders should treat any residual DNS records, SSL certificates, or historical WHOIS data as indicators of compromise.
Organizations are advised to block the domain, IP, and associated Cloudflare nameservers at the perimeter. Given the explicit targeting of KuCoin users, monitoring for similar Webflow-hosted domains with crypto-related page titles or KuCoin branding is recommended. No additional evidence of credential harvesting or wallet-draining functionality is available at this time, as the site content was not accessible for deeper analysis.
Data Coverage
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月13日
技术
识别出 3 项高置信度技术
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of kucoenloginer.webflow.io · checked Mar 1, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控