kuqzoiinlgin[.]godaddysites[.]com

This domain, kuqzoiinlgin.godaddysites.com, is identified as a brand impersonation threat specifically targeting KuCoin, a major cryptocurrency exchange platform. The site presents a fraudulent login page designed to harvest user credentials, potentially leading to unauthorized access to accounts, financial theft, or further exploitation through crypto drainer attacks. Users encountering this site are at elevated risk of credential compromise, which could result in immediate asset loss or subsequent phishing campaigns leveraging stolen data. Analysis indicates this domain was registered through GoDaddy.com, LLC on November 18, 2013, though its malicious use appears recent. The site resolves to IP address 13.248.243.5, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. Security vendors on VirusTotal flagged this domain with 19 detections out of 95 scans, confirming its malicious nature. The SSL certificate, issued by GoDaddy.com, Inc., aligns with the registrar but does not mitigate the threat. The page title, 'Loℊin | Loℊ In Kucoin,' uses homoglyphs to deceive users into believing they are accessing the legitimate KuCoin platform. If you visited kuqzoiinlgin.godaddysites.com or entered credentials on this site, immediate action is required. First, revoke access to any active sessions on the legitimate KuCoin platform and enable multi-factor authentication if not already active. Change your KuCoin password using a secure device and monitor your account for unauthorized transactions or suspicious activity. Consider using a hardware security key or authenticator app for enhanced protection. Report the incident to KuCoin’s official security team and document all interactions with the fraudulent site. Additionally, scan your device for malware to ensure no secondary infections were introduced during the visit.