auth--apps-kucooin-sso---cdnn.webflow.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of auth--apps-kucooin-sso---cdnn.webflow.io
This website appears to be a Webflow-hosted page presenting itself as a KuCoin sign-in or account access portal for cryptocurrency users. The page title and meta description reference logging in to manage a crypto portfolio, and the screenshot shows branding, navigation, and promotional elements associated with a crypto trading platform.
Based on the domain structure, however, this is not the primary KuCoin domain but a subdomain hosted on webflow.io. The hostname uses terms such as "auth," "sso," "cdnn," and a misspelled form of "kucoin," which may indicate an attempt to resemble a legitimate authentication page rather than an official corporate website. In practical terms, the page appears to target users interested in cryptocurrency trading or account access.
Safety Assessment for auth--apps-kucooin-sso---cdnn.webflow.io
This domain shows multiple high-risk indicators at the time of this scan. It was flagged by 18 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. The page also visually presents itself as a KuCoin login or promotional portal while being hosted on a third-party web-building subdomain rather than an official brand-owned domain, and the hostname closely resembles the KuCoin brand with an altered spelling. That combination may be consistent with a look-alike credential-harvesting page.
Blacklist and threat-database results were mixed. Major content-malice databases in the provided data did not report a listing at the time of this scan, and the malware file scan did not detect flagged files. However, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. Given the strong multi-engine phishing consensus, the brand resemblance, the misleading login framing, and the very low trust score provided, based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by Google Trust Services, and traffic appears to be proxied through Cloudflare infrastructure. The reported server IP is 172.64.151.8, the web server is identified as Cloudflare, and hosting is associated with Cloudflare in Toronto, Canada. The domain uses Cloudflare nameservers, while DNSSEC appears to be unsigned.
From a security perspective, the presence of HTTPS should not be treated as proof of legitimacy, since phishing pages commonly use valid certificates as well. The more notable technical concern here is the mismatch between the page's claimed identity and its actual hosting context: a Webflow subdomain using KuCoin-themed branding and login language, alongside a suspiciously constructed hostname.
Share your experience with this website. Was it safe? Did you encounter any issues?