kcuicoinlogoio[.]godaddysites[.]com

The domain kcuicoinlogoio.godaddysites.com is currently active and has been identified as a brand‑impersonation site targeting KuCoin users. Infrastructure analysis shows the domain resolves to IP address 76.223.105.230, which is associated with an AWS Global Accelerator endpoint located in the United States. The site is hosted on GoDaddy’s Website Builder platform and employs RequireJS and HTTP Strict Transport Security (HSTS). TLS is provided by a GoDaddy DV certificate issued by the GoDaddy TLS Intermediate CA DV – R1v1, confirming the use of a legitimate‑looking SSL chain. The page title returned by the server is "Kucoin Loℊin | Loℊ In Kucoin," reinforcing the impersonation intent. The domain appears on one public security blocklist and has been blocked by the PhishDestroy service. VirusTotal analysis reports that 18 of 91 scanned security vendors flagged the domain, indicating a moderate level of detection confidence. Given the confirmed use of the KuCoin brand and the presence of multiple security vendor detections, defenders should add the domain to network‑level deny lists, monitor DNS queries for the associated IP, and educate end‑users to avoid any login prompts originating from this URL. Continuous observation is advised, as the site remains reachable (HTTP 200) and the threat landscape may evolve.