kucoiinlog-usa-in[.]godaddysites[.]com

Analysis of kucoiinlog-usa-in.godaddysites.com indicates a high-risk phishing domain targeting cryptocurrency users. The domain, registered through GoDaddy.com, LLC on November 18, 2013, currently resolves to IP 76.223.105.230 (AS16509, Amazon.com, Inc., US). The page title, 'KÚCÔIN LÔGIN | BITCÔIN & CRYPTÔ EXCHANGE,' suggests an attempt to impersonate a cryptocurrency exchange platform, though no confirmed brand association has been established beyond the title itself. The domain is hosted on GoDaddy's infrastructure, with nameservers cns1.secureserver.net and cns2.secureserver.net, and employs an SSL certificate issued by Go Daddy Secure Certificate Authority - G2. Security vendors have flagged this domain, with 18 of 95 engines on VirusTotal detecting malicious activity. It appears on two security blocklists and is actively blocked by PhishDestroy and PhishingDB. The HTTP status code 200 confirms the page is accessible as of July 12, 2026. Detected technologies include GoDaddy Website Builder, RequireJS, and HSTS implementation, which may be leveraged to enhance the site's perceived legitimacy. While the domain's creation date predates typical phishing campaigns, this does not preclude malicious repurposing. Defenders should treat this domain as an active threat, particularly for users involved in cryptocurrency transactions. No evidence of compromise techniques (e.g., credential harvesting scripts, wallet drainers) is currently available, but the domain's intent aligns with known phishing tactics targeting crypto platforms. Network-level blocking is recommended, and further investigation into associated infrastructure (e.g., IP 76.223.105.230) may reveal additional malicious domains.