kucoinpori[.]com

This domain, kucoinpori.com, is identified as a high-risk brand impersonation threat specifically targeting the blur platform. Analysis confirms the domain was actively used for phishing operations before being taken offline. The impersonation attempt appears designed to deceive users into disclosing credentials or transferring assets under false pretenses. Infrastructure analysis reveals the domain was registered on August 11, 2025, through Gname.com Pte. Ltd. and resolved to the IP address 212.227.240.4, hosted on AS8560 (IONOS SE) in the United States. At the time of assessment, 14 of 95 security vendors on VirusTotal flagged the domain as malicious, while Google Safe Browsing explicitly classified it as a phishing site. The domain appears on one security blocklist, and its SSL certificate was issued by Let’s Encrypt (R13). Detection rates and registrar patterns align with known phishing campaigns targeting cryptocurrency users. As of the latest verification, kucoinpori.com has been taken offline, though residual risks may persist. Organizations and users are advised to block the domain and its associated IP (212.227.240.4) at the network perimeter. Security teams should monitor for related domains registered under the same registrar (Gname.com Pte. Ltd.) or resolving to the same IP infrastructure. Users who interacted with the domain should assume credential compromise and initiate password resets, multi-factor authentication reviews, and transaction verification for associated accounts.