kucoinexcange[.]weebly[.]com

Analysis of kucoinexcange.weebly.com as of July 29, 2026, confirms its classification as an active phishing domain targeting cryptocurrency users. The domain resolves to IP address 74.115.51.9 and is hosted on Weebly's infrastructure, utilizing nameservers ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, and ns-646.awsdns. Registration details indicate the domain was created on March 29, 2006, and is managed through registrar Safenames Ltd. While the creation date predates typical phishing campaigns, this may reflect repurposing of an older domain to evade detection. Security vendor assessments reveal elevated risk: the domain appears on one blocklist and is actively blocked by PhishDestroy.

VirusTotal scans show 15 of 91 security vendors flagging the domain as malicious, though the specific nature of these detections (e.g., phishing, malware, or other threats) is not detailed in available intelligence. No evidence from Google Safe Browsing or AlienVault OTX is present in the provided data, and SSL certificate details remain unanalyzed. The domain name itself suggests an intent to deceive users by mimicking a cryptocurrency exchange, though no brand is explicitly named in the available evidence, and the exact content of the site has not been analyzed.

Defenders should treat this domain as a confirmed phishing threat, particularly for users involved in cryptocurrency transactions. Recommended actions include blocking the domain and IP at perimeter security controls, alerting users to avoid interaction, and monitoring for related infrastructure (e.g., subdomains, linked IPs, or newly registered lookalike domains). Further investigation into the hosting provider's abuse response and potential takedown procedures is advised.