kucoinpora[.]com

Analysis of kucoinpora.com indicates a confirmed crypto phishing domain targeting the KuCoin brand, currently offline as of July 23, 2026. The domain was registered on July 30, 2024, through Gname.com Pte. Ltd., and resolves to the IP address 159.138.247.173, hosted on AS136907 (HUAWEI CLOUDS) in Thailand. Infrastructure analysis reveals the absence of an SSL certificate, a common red flag for fraudulent sites, and the use of nameservers a.share-dns.com and b.share-dns.net, which have been associated with other malicious domains in the past. The page title 'KuCoinpor' further suggests an attempt to impersonate the legitimate KuCoin platform, though the exact content and functionality of the site remain unanalyzed due to its offline status.

Detection data from security vendors is limited but notable: one of 95 vendors on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist, specifically PhishDestroy. The domain is explicitly classified as a crypto scam in available threat intelligence. While the low detection rate on VirusTotal does not rule out malicious activity, the combination of brand impersonation, lack of SSL encryption, and hosting on a provider frequently used for fraudulent operations elevates the risk assessment.

Defenders should treat this domain as compromised and take proactive measures, including blocking the domain and IP address at the network level, monitoring for related infrastructure (e.g., nameservers, registrar), and alerting users to potential phishing attempts. Given the domain's offline status, further forensic analysis may be limited, but historical DNS and WHOIS records should be preserved for future investigations. Organizations using KuCoin or similar platforms should verify any communications or domains claiming affiliation with the brand to prevent credential theft or financial fraud.