kucin-us[.]gitbook[.]io

Analysis indicates that kucin-us.gitbook.io is an active brand-impersonation domain targeting KuCoin users. The domain was registered on February 21, 2026, and currently resolves to Cloudflare infrastructure (AS13335) via IPv6 address 2606:4700:4400::6812:282f, with nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com. The page title explicitly claims affiliation with KuCoin, displaying 'Log In | Kucoin (Official Site)® | us,' which aligns with the reported scam type of cryptocurrency fraud. A Gridinsoft trust score of 0/100 further corroborates its malicious classification, and the domain appears on at least one security blocklist. While VirusTotal shows only 3 of 95 vendors flagging the domain, this limited detection does not diminish the high-risk assessment, as the domain remains active and employs Cloudflare's HTTP/3 and a Google Trust Services SSL certificate (WE1) to evade basic detection. The HTTP 307 redirect status suggests potential intermediate routing to obscure final destinations. Defenders should treat this domain as hostile, block resolution at the DNS level, and monitor for related infrastructure reuse, particularly within Cloudflare's AS13335 range. The exact content of the site has not been analyzed, but the combination of brand impersonation, cryptocurrency scam classification, and low trust scores warrants immediate containment.