auth-apps-kucoin-sso--c-cdn[.]webflow[.]io

The domain auth-apps-kucoin-sso--c-cdn.webflow.io is identified as a high-risk brand impersonation threat targeting KuCoin users. This domain is designed to deceive individuals into believing they are interacting with the legitimate KuCoin sign-in page, potentially leading to the theft of login credentials and other sensitive information.

Analysis of the domain reveals that it is flagged by 10 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through MarkMonitor, Inc., and was created on May 08, 2013. It resolves to the IP address 172.64.151.8 and uses an SSL certificate issued by Google Trust Services, which may give users a false sense of security. The page title 'KuCoin: Sign-in | Access Your Crypto Portfolio*' further enhances the deceptive nature of the domain.

Users who have visited this site are advised to immediately change their KuCoin account passwords and enable two-factor authentication (2FA) if not already enabled. It is also recommended to monitor their account activity for any unauthorized transactions and report any suspicious activity to KuCoin's support team. Additionally, users should avoid clicking on links from unverified sources and verify the URL of the site they are visiting to ensure it is the official KuCoin domain.