auth--app--kucoin--sso--cdnn[.]webflow[.]io

The domain auth--app--kucoin--sso--cdnn.webflow.io is actively involved in brand impersonation, specifically targeting KuCoin. As of the latest analysis, this domain remains active and presents a significant threat to potential victims. The web page associated with the domain uses the title 'KuCoin: Sign-in | Access Your Crypto Portfolio*', indicating its intention to deceive users into entering sensitive information under the guise of a legitimate KuCoin login portal.

This domain was registered through MarkMonitor, Inc., a registrar known for its association with fraudulent activities. The domain resolves to the IP address 104.18.36.248, located in the United States under AS13335, registered to Cloudflare, Inc. Despite being created on May 08, 2013, it has recently been flagged by 13 out of 95 security vendors on VirusTotal, marking it as malicious. Moreover, the domain appears on one known security blocklist, further substantiating its malicious intent.

In light of its active status, it is highly recommended that individuals and organizations exercise caution. Users should avoid interacting with this domain and report any encounters to cybersecurity professionals. Enterprises should update their security systems to recognize this threat and block traffic to and from the IP address associated with this domain. Ensuring that employees are educated about phishing risks and verifying site authenticity through known channels is crucial to mitigating potential harm.