scsvfvbf[.]vip

PhishDestroy has identified scsvfvbf.vip as an elevated-risk phishing domain that specifically impersonates the KuCoin cryptocurrency exchange platform. This threat falls under the brand impersonation category, where cybercriminals create a convincing replica of a legitimate login page to steal user credentials and potentially drain crypto wallets. The domain was actively hosting a fraudulent KuCoin interface, as evidenced by the page title 'KUCOIN', but has since been taken offline.

Technical indicators paint a clear picture of malicious intent. VirusTotal analysis shows that 24 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. The domain was registered on December 20, 2025, through Gname.com Pte. Ltd., and resolves to IP address 188.114.97.3. Notably, the site lacks an SSL certificate, which is a common red flag for phishing pages. These data points collectively confirm the domain's dangerous nature and its targeted impersonation of KuCoin.

To protect against such threats, users should always verify the authenticity of any URL claiming to be KuCoin by checking the official domain (kucoin.com) and never entering credentials on unverified sites. Enable two-factor authentication on your exchange accounts, use a password manager to auto-fill credentials only on legitimate domains, and consider using browser extensions that block known phishing sites. If you have already entered information on scsvfvbf.vip, change your KuCoin password immediately and contact KuCoin support to secure your account.