kueecoinlogin[.]webflow[.]io

The domain kueecoinlogin.webflow.io is flagged for brand impersonation, specifically targeting users of the cryptocurrency exchange KuCoin. While no drainer kit has been identified, the site mimics the legitimate KuCoin login page, posing a significant risk of credential theft.

Infrastructure analysis reveals that the domain is registered through NameCheap, Inc. and resolves to the IP address 172.64.151.8, which is located in the United States and is associated with Cloudflare, Inc. (AS13335). The domain was created on February 21, 2026, and is currently flagged by 19 out of 95 security vendors on VirusTotal. Additionally, the site appears on 1 security blocklist and is listed under the Google Safe Browsing program with an elevated risk status. The SSL certificate is issued by Google Trust Services / WE1, which may add a layer of trust for unsuspecting users.

The current status of the domain is offline, having been taken down by PhishDestroy. Despite its offline status, the domain remains a point of concern due to its previous activity and the potential for reactivation. Response actions have included the domain being added to various blocklists and flagged by security vendors, which helps mitigate the risk. However, users are advised to remain vigilant and only access KuCoin through verified and official channels to avoid falling victim to similar impersonation attacks.