kukonihlogin[.]webflow[.]io

This domain, kukonihlogin.webflow.io, is identified as a credential phishing resource targeting users of the cryptocurrency exchange KuCoin. The page impersonates the legitimate KuCoin login interface, presenting a fraudulent portal titled 'ꝄuCoin® Login - Accessing Your KuCōin Account Easily.' The substitution of Unicode characters (Ꝅ and ō) in the title suggests an attempt to evade basic detection mechanisms while maintaining visual similarity to the authentic brand. No direct evidence of a cryptocurrency drainer kit was observed, though credential harvesting remains the primary objective, potentially leading to unauthorized access to user funds or personal data. Infrastructure analysis reveals the following technical indicators: the domain was registered through NameCheap, Inc. on February 21, 2026, and resolves to the IP address 104.18.36.248, associated with AS13335 Cloudflare, Inc. in the United States. Detection metrics indicate elevated risk, with 17 out of 95 security vendors on VirusTotal flagging the domain as malicious. The domain appears on a single security blocklist and was actively blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), a common practice among phishing operators to lend an appearance of legitimacy. As of the latest assessment, the domain has been taken offline, reducing immediate exposure to end users. However, the infrastructure remains a residual risk, as threat actors frequently repurpose or re-deploy similar domains under different names. Users who may have interacted with this resource are advised to revoke any active sessions, reset credentials, and monitor associated accounts for unauthorized activity. Organizations should update blocklists to include the domain and IP address, while security teams should investigate potential lateral movement from compromised credentials. The use of Unicode spoofing in the page title underscores the need for enhanced detection mechanisms capable of identifying homoglyph-based impersonation tactics.