kucoin-loging[.]gitbook[.]io

This domain, kucoin-loging.gitbook.io, presents a direct threat to users by impersonating the KuCoin cryptocurrency exchange. The site displays a fraudulent login portal under the title 'KÚCÔIN LÔGIN | BITCÔIN,' designed to harvest credentials from unsuspecting victims. Such impersonation attacks often lead to unauthorized account access, financial theft, or further exploitation through crypto drainers or malware distribution. The use of homoglyphs (e.g., KÚCÔIN) in the title is a common tactic to deceive users into believing the site is legitimate. Analysis indicates the domain was registered on March 07, 2026, and is hosted through Cloudflare, Inc. (AS13335), resolving to the IP address 104.18.40.47. Security vendors on VirusTotal flagged the domain as malicious, with 17 out of 95 detections confirming its fraudulent nature. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing sites frequently use valid certificates to appear trustworthy. The domain has since been taken offline, but its prior activity and infrastructure remain concerning. Users who visited kucoin-loging.gitbook.io or entered credentials on the site should take immediate action. First, revoke any active sessions on the legitimate KuCoin platform and change passwords using a secure device. Enable multi-factor authentication (MFA) if not already active. Monitor linked accounts for unauthorized transactions and report any suspicious activity to the legitimate exchange. If financial loss occurred, file a report with local cybercrime authorities and provide all relevant details, including timestamps, IP addresses, and transaction hashes. Avoid reusing passwords across platforms to prevent further compromise.