kiucun-log[.]godaddysites[.]com

This domain, kiucun-log.godaddysites.com, poses a credential theft risk by impersonating the KuCoin cryptocurrency exchange. The site displays a fraudulent login page titled 'KuCoin: Log In | Sign In,' designed to harvest user credentials. Visitors entering login details risk unauthorized account access, financial theft, or further exploitation through compromised credentials. The threat specifically targets users familiar with KuCoin’s branding, leveraging a convincing replica of the legitimate platform’s interface to deceive victims. Analysis indicates the domain was registered on November 18, 2013, through GoDaddy.com, LLC, though its malicious activity likely commenced much later. The domain resolves to IP address 76.223.105.230, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). Security vendor detections on VirusTotal total 17 out of 95, with one security blocklist (PhishDestroy) actively flagging the domain. The SSL certificate, issued by GoDaddy.com, Inc., further obscures its illegitimacy by mimicking trusted encryption standards. Despite its current offline status, the domain’s historical activity and detection metrics confirm its role in brand impersonation campaigns. Individuals who visited kiucun-log.godaddysites.com should immediately revoke any entered credentials and enable multi-factor authentication on their KuCoin accounts. Monitor linked financial accounts for unauthorized transactions and report suspicious activity to the legitimate platform. Reset passwords for any accounts where identical or similar credentials were reused. Organizations should update internal blocklists to include this domain and its associated IP address (76.223.105.230) to prevent future access attempts. Users are advised to verify domain authenticity before entering sensitive information, particularly when prompted by unsolicited login requests.