info-portal-kuoin[.]typedream[.]app

This domain is flagged for elevated-risk credential phishing targeting KuCoin users. Analysis indicates the threat involves brand impersonation, specifically mimicking the official KuCoin login interface to harvest cryptocurrency account credentials. The page title, 'KuCoin Login: Secure Access to Your Crypto Trading Account,' reinforces the deception by closely replicating legitimate branding and terminology used by the exchange. Infrastructure analysis reveals the domain info-portal-kuoin.typedream.app is registered through Typedream and resolves to the IP address 188.114.96.3. The site appears on one security blocklist and is detected by 19 out of 95 security vendors on VirusTotal. A Gridinsoft trust score of 0/100 further confirms its malicious classification. The domain employs Google Trust Services for SSL certification and utilizes multiple cloud-based technologies, including Node.js, React, Next.js, Google Cloud CDN, and Cloudflare Browser Insights. Despite its current offline status, the domain's technical indicators align with active phishing infrastructure. Mitigation measures should include immediate blacklisting of the domain and associated IP 188.114.96.3 within network security controls. Organizations and individuals are advised to implement multi-factor authentication (MFA) for cryptocurrency exchange accounts to mitigate credential theft risks. End-users should verify domain authenticity by cross-referencing URLs with official exchange communications and inspecting SSL certificates for discrepancies. Security teams are recommended to monitor for similar Typedream-registered domains exhibiting KuCoin branding, particularly those leveraging Google Cloud and Cloudflare infrastructure.