kucown-log-in[.]godaddysites[.]com

PhishDestroy has identified kucown-log-in.godaddysites.com as a dangerous brand impersonation site targeting KuCoin users. This domain masquerades as a legitimate KuCoin login page, complete with a convincing title reading "KÚCOIN LOGIN | BITCOIN & CRYPTO." Its sole purpose is to trick visitors into entering their account credentials, which are then harvested by cybercriminals to drain cryptocurrency wallets. The site poses a serious risk of financial loss, especially for those who reuse passwords across platforms.

Our investigation reveals strong evidence of malicious intent. VirusTotal data shows that 19 out of 95 security vendors flagged this domain, and it appears on two security blocklists. The domain was created on November 18, 2013, but its recent use for phishing is clear. It is registered through GoDaddy.com, LLC and resolves to IP address 13.248.243.5. The SSL certificate is issued by GoDaddy.com, Inc., which may lend a false sense of legitimacy. Fortunately, as of the latest check, the site has been taken offline.

If you have visited this domain or entered any information, take immediate action. Change your KuCoin password and enable two-factor authentication if you haven't already. Also update any other accounts that share the same password. Monitor your crypto wallets for unauthorized transactions and consider contacting KuCoin support for further guidance. Always verify URLs through PhishDestroy before entering sensitive data, and remember that legitimate login pages will never ask for credentials on a third-party domain like godaddysites.com.