qocuinlogingle[.]webflow[.]io

The domain qocuinlogingle.webflow.io is currently active and has been classified as a high‑risk brand‑impersonation site targeting KuCoin users. Infrastructure analysis shows it resolves to IP 104.18.36.248, hosted in the United States under AS13335 Cloudflare, Inc. The domain was registered on February 22, 2026 through NameCheap, Inc., and utilizes Webflow, Cloudflare, and HTTP/3 services. A Google Trust Services / WE1 SSL certificate is present, and the HTTP response returns status 200. The page title "Access Industry‑Leading Trading Platform with KuCoin Login" explicitly references KuCoin, confirming the impersonation claim. Threat intelligence indicates a Gridinsoft trust score of 0/100 and that the domain is listed on one security blocklist. It is blocked by PhishDestroy and 20 of 95 VirusTotal scanners flag the domain as malicious, supporting its classification as a crypto‑scam. While the page content beyond the title has not been publicly dissected, the available indicators suggest a credential‑harvesting operation aimed at KuCoin account holders. Defenders should immediately block qocuinlogingle.webflow.io at DNS, proxy, and firewall layers, update intrusion detection signatures to include the domain and its associated IP, and monitor for related traffic patterns. Continuous re‑assessment is advised to capture any changes in hosting or payload delivery.