kucoinporl[.]com

kucoinporl.com was observed on July 12, 2026 as an active brand impersonation campaign targeting the brand identified as blur. The site presents the page title “KuCoinpor” and is classified as a fake exchange. The domain was created on August 11, 2025 and is currently flagged with a high risk rating. Infrastructure analysis shows the domain is registered through Gname.com Pte. Ltd. and resolves to IP address 212.227.240.4, which belongs to ASN 8560 operated by IONOS SE in the United States. DNS resolution is served by the authoritative nameservers a6.share-dns.com and b6.share-dns.net. The web server reports Nginx and enforces HTTP Strict Transport Security, while client‑side code is built with Vue.js. The TLS certificate is issued by Let’s Encrypt under R13, indicating a short‑lived certificate. Detection telemetry confirms the site is already listed on one security blocklist and is blocked by PhishDestroy. Google Safe Browsing categorizes the URL as SOCIAL_ENGINEERING. VirusTotal scans returned 12 detections out of 95 scanned security vendors, reinforcing the malicious assessment. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single external blocklist. Defenders should add the domain and its resolving IP address to URL filtering and DNS sinkhole rules. Monitoring of the associated nameservers and registrar may reveal further related registrations. Because the site imitates a legitimate exchange, users should be warned about unsolicited communications that reference the blur brand and instructed to verify URLs before credential entry. Continuous re‑scanning of the domain is recommended to capture any changes in the detection landscape.