koiicinglogn[.]godaddysites[.]com
“KÚCÔIN LÔGIN | KÚCÔIN trading platform”
koiicinglogn.godaddysites.com — Konten tidak tersedia. Peniruan identitas merek: KuCoin; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 13/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, ESET, Forcepoint ThreatSeeker); PhishDestroy score 89/100. Registrar: GoDaddy.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain koiicinglogn.godaddysites.com was observed hosting a page titled “KÚCÔIN LÔGIN | KÚCÔIN trading platform”, explicitly referencing the KuCoin cryptocurrency exchange. The site is registered through GoDaddy.com, LLC and uses GoDaddy’s default nameservers cns1.secureserver.net and cns2.secureserver.net. DNS resolution points to 76.223.105.230, an Amazon Web Services IP address located in the United States and belonging to ASN 16509 (Amazon.com, Inc.). The TLS certificate presented is a Go Daddy Secure Certificate Authority – G2 certificate issued by GoDaddy.com, Inc., matching the hosting provider.
An HTTP request returns a 404 status, indicating the content is no longer available, and the domain is currently listed as offline. Despite the offline state, the domain appears on at least one public blocklist (PhishDestroy) and has been flagged by 13 of 95 VirusTotal scanners, reinforcing its malicious classification. The page title and the explicit mention of “KuCoin” confirm a brand‑impersonation campaign aimed at deceiving users of the KuCoin platform, likely to harvest credentials or facilitate a crypto‑related fraud. The registration date of 18 November 2013 shows the domain has existed for many years, but its recent activation aligns with the detection timestamp.
No additional technical artifacts such as malicious payloads, redirects, or JavaScript have been disclosed, leaving the exact attack vector uncertain. Defenders should update web filtering and DNS sinkhole policies to block resolution of this host, monitor for any traffic to the associated AWS IP range, and enforce multi‑factor authentication for KuCoin accounts. Threat intelligence feeds should incorporate the observed indicators – domain name, IP address, SSL fingerprint, and blocklist identifiers – to improve detection across endpoint and network sensors. Continuous re‑evaluation is advised in case the site is reinstated or reused in future campaigns.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: godaddysites.com
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain godaddysites.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive