kuqyoiinlgin[.]godaddysites[.]com

The domain kuqyoiinlgin.godaddysites.com has been identified as a confirmed brand impersonation threat, specifically targeting the cryptocurrency exchange KuCoin. The domain is currently offline, but it poses an elevated risk due to its deceptive nature and potential to compromise user credentials.

Analysis indicates that the domain was flagged by 18 of 95 security vendors on VirusTotal, highlighting its suspicious activity. The domain was registered through GoDaddy.com, LLC on November 18, 2013. Infrastructure analysis reveals that it resolved to the IP address 13.248.243.5, which is located in the United States and is part of the Amazon.com, Inc. network (AS16509). The domain appears on 2 security blocklists, including PhishDestroy and PhishingDB, further confirming its malicious intent. The page title, 'Loℊin | Loℊ In Kucoin,' is a clear attempt to impersonate the legitimate KuCoin login page, which could mislead users into providing sensitive information.

Given the current offline status of the domain, it is recommended that users remain vigilant and avoid interacting with any links or pages that appear similar to kuqyoiinlgin.godaddysites.com. Security teams should monitor for any reappearance of the domain and ensure that network defenses are updated to block it. Additionally, users should verify the authenticity of any login pages by directly accessing the official KuCoin website through a bookmark or a trusted search engine.