kucoidilogin[.]gitbook[.]io

This domain, kucoidilogin.gitbook.io, is a confirmed fake login page designed to impersonate the legitimate cryptocurrency exchange KuCoin. The primary threat posed by this site is the potential for credential theft, where unsuspecting users may enter their login information, leading to unauthorized access to their KuCoin accounts.

Analysis indicates that kucoidilogin.gitbook.io was created on March 30, 2014, and is registered through Cloudflare, Inc. The domain resolves to the IP address 198.18.2.77, which is associated with Cloudflare, Inc. in the United States (AS13335). The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to visitors. VirusTotal reports that 17 out of 95 security vendors have flagged this domain as malicious. Additionally, the site appears on two security blocklists: PhishDestroy and PhishingDB.

If a user has visited kucoidilogin.gitbook.io, they should immediately check their KuCoin account for any unauthorized activity. It is recommended to change the password and enable two-factor authentication (2FA) if it is not already active. Users should also monitor their account for any unusual transactions or login attempts and report any suspicious activity to KuCoin's support team. To avoid similar threats in the future, users should always verify the URL of the site they are accessing and ensure it matches the official domain of the service they intend to use.