kkuiiicnn110giin[.]godaddysites[.]com

The domain kkuiiicnn110giin.godaddysites.com poses a specific brand impersonation threat targeting KuCoin, a cryptocurrency exchange. The page title, "Kucoin Loℊin | Loℊ In Kucoin," uses Unicode characters to visually mimic the legitimate login portal, attempting to steal credentials from unsuspecting users. This is a classic phishing tactic designed to harvest usernames, passwords, and potentially two-factor authentication codes. The domain was created on February 21, 2026, and registered through GoDaddy.com, LLC, with an SSL certificate issued by GoDaddy, giving it a false sense of legitimacy. It resolves to IP 13.248.243.5.

Technical indicators strongly support the phishing classification. VirusTotal reports that 19 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. The domain is currently offline, but its recent creation date and high detection rate suggest it was actively used in a campaign. The use of a subdomain under godaddysites.com, a free website builder, is a common tactic among phishers to avoid detection and reduce setup costs. The combination of brand impersonation, credential harvesting intent, and vendor flags elevates the risk level to elevated.

If a user visited this domain and entered any information, they should immediately change their KuCoin account password and enable two-factor authentication if not already active. They should also monitor their account for unauthorized transactions and contact KuCoin support. PhishDestroy recommends verifying all login URLs directly from the official KuCoin website or app. Users should avoid clicking on links in unsolicited messages and always check the domain name for subtle misspellings or unusual characters. Reporting the domain to security authorities and blocklist providers can help prevent future victims.