kucoin18[.]top

Analysis of kucoin18.top indicates this domain is a brand-impersonation scam targeting KuCoin users, currently offline as of July 23, 2026. The domain was registered on July 20, 2025, through Gname.com Pte. Ltd., and resolves to IP 188.114.97.3, hosted on Cloudflare's network (AS13335) in the United States. Infrastructure analysis reveals Cloudflare nameservers (blakely.ns.cloudflare.com, piers.ns.cloudflare.com) and HTTP/3 support, alongside a Google Trust Services SSL certificate (WE1), which does not inherently validate legitimacy. At the time of assessment, the domain returns an HTTP 503 status, suggesting it has been taken offline or is experiencing technical issues.

Security vendor detections provide concrete evidence of malicious intent: 11 of 95 engines on VirusTotal flagged the domain, and it appears on at least one security blocklist (PhishDestroy). The scam type is classified as a crypto scam, consistent with KuCoin's branding and services. While the domain's exact content remains unanalyzed, the combination of brand impersonation, Cloudflare hosting, recent registration, and detection by multiple security vendors confirms elevated risk.

Defenders should treat this domain as compromised and maintain blocklist entries, particularly for environments involving cryptocurrency transactions. Further investigation into associated IPs, SSL certificates, and registrar records may uncover additional linked infrastructure. Given the domain's current offline status, real-time user interaction cannot be assessed, but historical indicators warrant continued monitoring for reactivation or migration to new domains.