kucoin-logink[.]gitbook[.]io

The domain kucoin-logink.gitbook.io was registered on March 07, 2026 through a major DNS provider and resolves to the IP address 104.18.40.47, which belongs to a U.S.-based content delivery network. An HTTPS certificate issued by a reputable certificate authority secures the site, and the server responds with HTTP status 307, indicating a redirect. Automated analysis flags the site as a high‑risk crypto‑scam impersonating the KuCoin exchange; the page title explicitly references "KÚCÔIN LÔGIN | BITCÔIN". VirusTotal reports 12 detections out of 94 scanners, and a separate reputation engine assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The infrastructure employs a documentation hosting platform, a cloud storage layer, and HTTP/3 support, all typical of fast‑changing phishing kits. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy sinkhole, yet it remains reachable and operational. Defenders should add the domain to internal blocklists, monitor DNS queries for the associated nameservers, and enforce outbound filtering for connections to the underlying IP range. Continuous observation is advised because the site may evolve or spawn additional malicious hosts.