manage-kucoin-en[.]framer[.]ai

The domain manage-kucoin-en.framer.ai is currently active and has been identified as a phishing source. It is listed on two public security blocklists and has been blocked by the PhishDestroy and OpenPhish feed aggregators. VirusTotal scans show that 15 of 91 security vendors have flagged the domain, indicating a moderate to high level of consensus among detection tools. The domain resolves to the IPv4 address 31.43.160.6, which is the sole hosting endpoint observed in the available data.

Registration information points to Framer B.V. as the registrar, and no nameserver records were returned during the lookup, suggesting either a misconfiguration or a deliberately hidden DNS setup. No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or content signatures is presently available, limiting the visibility into the exact payload or lure used. Defenders should treat the domain as hostile: network perimeter devices, DNS resolvers, and endpoint protection platforms should be configured to block any resolution to 31.43.160.6 and to deny traffic to the fully‑qualified domain name.

Continuous monitoring of the IP address for any new associations is advised, as threat actors frequently repurpose hosting assets. Organizations that rely on the KuCoin brand should be especially vigilant, as the sub‑domain prefix "manage-kucoin-en" implies an attempt to impersonate KuCoin account management functions. Given the active blocklist entries and the multi‑vendor detection rate, the risk rating remains high, and remediation actions should be prioritized accordingly.